El Umbukeli weMnyhadala weWindows Sesinye sezona zixhobo zinamandla (kwaye kwangaxeshanye ezingaziwayo) izixhobo ezifakwe kwinkqubo yokusebenza yeMicrosoft yokuxilonga kunye nokusombulula ingxaki. Nangona abasebenzisi abaninzi bengayihoyi, lo mjongi uvumela ukufikelela kuyo ulwazi oluyimfuneko malunga nobume bendlela yakho, izicelo, kunye neenkonzo, kukunceda uchonge oyena nobangela wazo zonke iintlobo zeemposiso. Ngokuziqhelanisa okuncinci kunye nokwazi ukuba ujonge ntoni, unokuba ngumcuphi wedijithali kwaye ufumanise ukuba kutheni iWindows okanye nayiphi na inkqubo efakiweyo isilela.
Ukuzulazula kwiilogi kunokubonakala kunzima ekuqaleni, kodwa kufanelekile ukufunda izitshixo zokutolika ngokuchanekileyo idatha kunye nokuqonda indlela yokusebenzisa iSibonelelo soMcimbi ukubona iimpazamo, ukuthintela iingxaki, kunye nokuphucula ukusebenza kwePC yakho. Nasi isikhokelo esipheleleyo sayo yonke into ekufuneka uyazi, kunye neengcebiso, amanyathelo aneenkcukacha, kunye neenkcazo zecandelo ngalinye lombukeli, kubandakanya nendlela yokuhlalutya. Iimpazamo zeMicrosoft Defender kunye neengcebiso ezininzi ezisebenzayo zokufumana okuninzi kolu phawu.
Yintoni uMjongi weMnyhadala weWindows kwaye yenzelwe ntoni kanye kanye?
El Umbukeli womsitho Sisixhobo esibandakanyiweyo kuzo zonke iinguqulelo zeWindows ezibonisayo iirekhodi ezineenkcukacha yayo yonke imisebenzi efanelekileyo yenkqubo, yahlulwe ngokweendidi ezifana Isicelo, Khu seleko y Inkqubo, phakathi kwabanye. Injongo yayo kukukunceda ukubeka iliso, uphicotho kunye nokusombulula ingxaki Zombini iingxaki zemihla ngemihla (ukuvalwa kanzima, ukukhenkceza, iinkqubo ezingaphenduliyo) kunye neziganeko zokhuseleko, iinzame zokufikelela okungagunyaziswanga, okanye ukungaphumeleli kwiinkonzo eziphambili. Ngombulelo kwinqanaba layo leenkcukacha, yindawo yokuqala yalo naluphi na uhlalutyo lwemposiso ephezulu, nokuba kubasebenzisi basekhaya okanye abalawuli benkqubo.
Ufikelela njani kwiSibonelelo soMsitho kwiWindows inyathelo ngenyathelo
- Kwiinguqulelo zamva nje zeWindows, ungacofa Yinqoba + X kwaye ukhethe Umbukeli womsitho ngqo. Unokukhangela u-"eventvwr" kwimenyu yokuqalisa.
- Ukuba uneWindows endala, yiya ku Iphaneli yokulawula> IziXhobo zoLawulo> Isijongi soMnyhadala.
- Ukuba usebenzisa isikrini sokuqala, chwetheza isehlo.msc, cofa u-enter kwaye iya kuvula.
Xa ungaphakathi, uya kubona iphaneli esecaleni apho i Iigodo zeWindows (Isicelo, uKhuseleko, iNkqubo) kunye nomthi Iifowuni zesicelo kunye neenkonzo. Oku kuqulethe ulwazi jikelele kunye necandelo elithile, kuquka i-ETW (Umkhondo woMcimbi weWindows) ababoneleli, abaluncedo kakhulu kuxilongo oluphambili.
Iilogi ezingundoqo zokuJonga uMnyhadala oFumana Uzazi Ngawo
- Isicelo: Oku kuqulethe izilumkiso, iimpazamo, kunye nolwazi oluveliswe zizicelo kunye neenkonzo.
- Ukhuseleko: Ingundoqo ekubhaqeni ufikelelo, ukungena kunye nemisebenzi ekrokrisayo.
- Inkqubo: igcina idata malunga nenkqubo yokusebenza ngokwayo, abaqhubi, ihardware kunye neenkonzo zangaphakathi.
Ngapha koko, kwi Iifowuni zesicelo kunye neenkonzo Uza kufumana iziganeko eziyelelene kumacandelo ngamanye, anje ngeMicrosoft Defender, iinkonzo zetelemetry, iantivirus, okanye ezinye iimodyuli ezibalulekileyo. Eli licandelo ekufuneka libonwe ukuba ujonge imvelaphi yeemposiso eziphinda-phindayo okanye indlela yokuziphatha engaqhelekanga kusetyenziso oluthile.
Indlela yokubona iimpazamo kunye nezilumkiso: Iingcebiso eziphambili
Kwirekhodi nganye, iziganeko zihlelwa ngokwenqanaba: Ulwazi, Isilumkiso, imposiso y Kubalulekile. Okufanelekileyo kukugxila kwezo zohlobo imposiso y Isilumkiso, ingakumbi ukuba zingqamana nexesha oye wafumana le ngxaki ngalo. Cofa kabini nasiphi na isiganeko ukujonga ulwazi olwandisiweyo kwifestile, kuquka iinkcukacha, iikhowudi zeemposiso ezinokwenzeka, iimodyuli ezichaphazelekayo, kwaye ngamanye amaxesha amakhonkco okanye imiyalelo yokulungisa umba.
Icebiso: ungasebenzisa ukhetho Hluza irekhodi langoku ukubonisa iimpazamo okanye izilumkiso kuphela, ikwenza kube lula ukufumana iimpazamo ezifanelekileyo.
Ukugrumba nzulu: Izehlo zeMicrosoft Defender kunye neDiagnostics eqhelekileyo
Abasebenzisi abaninzi bafuna iindlela zokutolika imiyalezo eyenziwe nguMicrosoft Defender ye-Endpoint (ekwabizwa ngokuba yiSense okanye i-MDE) kwisiBonelelo soMnyhadala. Le miyalezo iyanikezela imikhondo ebalulekileyo malunga nemeko yokhuseleko lwenkqubo kunye neempazamo ezinokwenzeka ekungeneni, ukufikelela kwilifu, okanye ukunxibelelana neenkonzo zangaphandle.
Apha ngezantsi kucazululo lwezinye iimeko zempazamo eziqhelekileyo kunye neekhowudi onokudibana nazo, kunye nokutolika kwazo kunye neengcebiso:
- Ukuqala nokumisa inkonzo: Imiyalezo echaza ukuba inkonzo "iqalisiwe" okanye "ivaliwe" idla ngokubonisa ukusebenza okuqhelekileyo kwaye ayifuni ntshukumo.
- Inkonzo yemposiso yokuqalisa: Ukuba ubona imiyalezo efana ne "Impazamo yokuqalisa iMicrosoft Defender yenkonzo ye-Endpoint. Ikhowudi yempazamo: ", luluvo oluhle ukuphonononga eminye imiyalezo ehambelana nezizathu. Oku kunokubangelwa yimiba yeefayile zeDLL (MsSense), iiseshoni zeETW ezigcwele kakhulu, iimvume ezingonelanga, okanye ukungaphumeleli kwezikripthi zokungena.
- Iingxaki zoqhagamshelwano lweseva: Izehlo ezinje "ayikwazanga ukuqhagamshela kumncedisi kwi " zidla ngokubonisa iimpazamo zenethiwekhi okanye ummeli. Jonga i uqhagamshelo, ubume be-firewall kunye nezicwangciso zeproxy.
- Ufako aluphumelelanga okanye olungaphelelanga: Imiyalezo efana nethi "Inkonzo ayifakwanga" okanye "Akukho parameters yokukhwela ifunyenwe" ibonisa ukuba isixhobo asidityaniswanga ngokufanelekileyo kwiqonga lolawulo. Hlaziya izikripthi kunye neepakethe zoqwalaselo kwaye ucinge ngokuphinda ukhwele isixhobo ukusuka ekuqaleni.
Ukusombulula imiba eqhelekileyo ngokusekwe kwiziganeko ezifakiweyo
- Iingxaki ngexesha lokukhwela / ukuphuma kwibhodi: Xa udibaniso lwesixhobo kunye ne-Microsoft Defender lusilela okanye lushiywe lungagqitywanga, iimpazamo zinokuvela ezinxulumene nokutshintsha uhlobo lokuqalisa, ukungakwazi ukucoca ubumbeko, okanye ukugcina useto. Ukusasaza ngokutsha izikripthi, ukungqinisisa iimvume zobhaliso, kunye nokuphinda uqalise isixhobo kuhlala kwanele.
- Iimpazamo xa usebenzisa ulungelelwaniso lwamafu: Ukuba ifayile yoqwalaselo enempazamo ifunyenwe, inkonzo iya kuzama ukusebenzisa ulungelelwaniso lokugqibela olusebenzayo okanye olungagqibekanga. Beka iliso kwiziganeko ezilandelayo ukuqinisekisa ubuyiselo.
- Iiseshini zeETW zigcwele okanye aziqalwanga: Ukugqithiswa kweseshoni kubangela ukuba iziganeko ezibalulekileyo zingabhalwanga. Ukuba umbukeli uhlala ebhala iimpazamo ezinxulumene "nokungabikho kwezixhobo," qalisa kwakhona ikhompyutha yakho okanye uvale ezinye iiseshini zokubeka iliso ngaphambi kokuba uzame kwakhona.
- Akukwazeki ukuhlaziya irekhodi: Ukuba iziganeko zibonisa ukuba i-GUID ayinakugcinwa, ukuxhomekeka akunako ukufakwa, okanye izitshixo (izitshixo ze-cryptographic, isimo sokuqinisekisa, njl.) azinakuhlaziywa, khangela ukuba umsebenzisi okanye inkonzo ineemvume zokubhala kwi-Windows registry.
Ukutolikwa kwezilumkiso kunye nokusebenza okuqhelekileyo
Uninzi lwemiyalezo eqokelelwe kwiSibonelelo soMsitho zidweliswe njenge "Isaziso sokusebenza okuqhelekileyo"; oku kubonisa ukuba unxibelelwano, ukuqaliswa, ukongeza, okanye ukususwa kuqhubeka ngokuchanekileyo. Nangona kunjalo, isoloko ingumbono olungileyo ukuphonononga iinkcukacha zesiganeko ngasinye ukuba ubona ukuziphatha okungaqhelekanga kwinkqubo okanye inkonzo.
Kwelinye icala, amanye amangeno kumjongi abhekisa kumaxwebhu okanye imithombo yangaphandle yolwazi oluthe kratya, njengezikhokelo kuqwalaselo lommeli, izikripthi zokungena, okanye indlela yokujonga iilogi ezithile zeMicrosoft Defender. Kubalulekile ukulandela ezi ngcebiso kwaye ugcine zombini inkqubo kunye namalungu ayo ehlaziyiwe.
Iingcebiso eziphucukileyo zokuthatha ithuba loMjongi weMnyhadala
- Thumela imisitho efanelekileyo: Ungagcina naluphi na ungeno lombukeli njengefayile ye.evtx okanye kwifomathi yombhalo, okwenza kube lula ukuthumela ukuxhasa okanye ukuhlalutya kwezinye iikhompyuter.
- Sebenzisa isihluzo kunye nezimvo ezilungiselelweyo: Yenza izihluzi eziphambili ukudibanisa iikhrayitheriya ezininzi (umzekelo, inqanaba lemposiso kunye namagama angundoqo) kwaye ubone iipateni ezinokuthi zingaqatshelwa.
- Jonga ifayile ye-Event.log: Zonke iziganeko zigcinwe kule fayile, eluncedo ekuphicotheni okanye ekuphononongeni iilogi ezindala xa umbukeli ehlangabezana nemiba.
Iimpazamo eziqhelekileyo kunye nendlela yokujongana nazo ngokwecandelo
- Iimpazamo zokuqaliswa kwenkonzo: Le miba ibandakanya iingxabano ze-DLL, ukuxhomekeka okulahlekileyo, iimpazamo zobhaliso, okanye imiba yemvume. Ukuba akukho nanye kwezi zisombululo ezisebenzayo, qhagamshelana nenkxaso ekhethekileyo.
- Iimpazamo ngenxa yokungahambelani kwenguqulelo: Ezinye iziganeko zibonisa iinzame zokusebenzisa iipakethe okanye ulungelelwaniso lweenguqulelo ezingahambelaniyo zeWindows okanye i-Defender. Khangela ukuba yonke into isexesheni kwaye iyahambelana.
- Iingxaki nge-telemetry okanye ukufakwa kwedatha: Ukuba inkonzo ayikwazi ukuthumela i-telemetry ngenxa yokuphelelwa yisikhathi okanye iithokheni ezingasebenziyo, iya kuba yethutyana. Inkqubo iya kuzama ukuyivula kwakhona xa inophawu olusebenzayo; kungenjalo, uhlaziyo lwenkonzo okanye ukuqalisa kwakhona kuya kufuneka.
Uqhagamshelwano kunye nemiba yenethiwekhi: iziganeko eziphambili
Ezinye zezona mpazamo zixhaphakileyo zisuka ekungakwazini ukunxibelelana nelifu, iiseva, okanye iinkonzo zoqinisekiso. Oku kunokubangelwa kukungaqwalaselwanga kakuhle kweeproksi, iifirewall ezithintelayo, ukucima kwe-intanethi, okanye iipakethi eziphelelwe lixesha. Iziganeko zihlala zibonelela imikhondo ecacileyo ngee-URL, iikhowudi zeemposiso, kunye nemiyalezo ecacisayo. Ngumbono olungileyo ukujonga uqhagamshelo, uhlengahlengiso lweeproksi, kwaye uqinisekise ukuba i-firewall yakho ivumela unxibelelwano oluyimfuneko.
Amanqaku angolunye usetyenziso lweMboni yoMsitho kunye neeLogi ezongezelelweyo
El Isibonisi Ayisetyenziswa kuphela kwiMicrosoft Defender, kodwa ikwasetyenziselwa uphicotho Nasiphi na isicelo esifaka imicimbi kwiWindows. Ukusuka kwiFayileMaker Server, iinkonzo zenethiwekhi, uhlaziyo lweWindows, kubaqhubi kunye nehardware-bonke bavelisa iilogi apha. Ukufunda ukuzitolika nokwahlula phakathi kolwazi, izilumkiso kunye neempazamo kuya kukuvumela ukuba wenze ngokukhawuleza kwaye uphephe iingxaki ezinkulu.
Eminye imiyalezo izakukhokelela kwezinye iindawo zelog (umzekelo, Event.log) okanye inike imiyalelo yendlela yokwenza okanye ukuvala iilog ezithile ngokusekelwe kwicandelo okanye umthengisi. Oku kuya kunceda ukusombulula ingxaki okanye uhlalutyo oluphambili emva komcimbi onzima.
Thatha ixesha lokuziqhelanisa ne Umbukeli weMnyhadala weWindows Oku kuguqulela kuxilongo olukhawulezayo, ixesha elichithwe kancinci, kunye nokhuseleko olukhulu lwekhompyuter yakho. Ukuqonda esi sixhobo kuya kukuvumela ukuba uphendule ngokufanelekileyo kuyo nayiphi na impazamo. Rhoqo, imiyalezo inokubonakala isothusa, kodwa eneneni ichaza kuphela iimeko eziqhelekileyo okanye iinkqubo eziqhubekayo. Ukuba ufumanisa iimpazamo eziphindaphindiweyo okanye awukwazi ukuzicombulula ngokulandela izikhokelo, unganqikazi ukuqhagamshelana nenkxaso yezobuchwepheshe, ukubonelela ngeenkcukacha kunye nokuthumela ngaphandle umbukeli.