{"id":462,"date":"2021-12-19T18:50:30","date_gmt":"2021-12-19T18:50:30","guid":{"rendered":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?page_id=462"},"modified":"2022-01-13T13:59:50","modified_gmt":"2022-01-13T13:59:50","slug":"perimeter-devices","status":"publish","type":"page","link":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/","title":{"rendered":"Perimeter Devices"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"462\" class=\"elementor elementor-462\" data-elementor-settings=\"[]\">\n\t\t\t\t\t\t\t<div class=\"elementor-section-wrap\">\n\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-e0d0544 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"e0d0544\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-f591cbc\" data-id=\"f591cbc\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6237f25 elementor-widget elementor-widget-spacer\" data-id=\"6237f25\" data-element_type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0359e77 elementor-widget elementor-widget-heading\" data-id=\"0359e77\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h1 class=\"elementor-heading-title elementor-size-default\">Perimeter Devices<\/h1>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3d95e6d elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3d95e6d\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-9b35217\" data-id=\"9b35217\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7c6a47a elementor-widget elementor-widget-heading\" data-id=\"7c6a47a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Definition und Begriff<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ca7d2b elementor-widget elementor-widget-text-editor\" data-id=\"5ca7d2b\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Ger\u00e4te, die Netzwerkteile verbinden, werden als Perimeter Devices bezeichnet. Darunter fallen Router, Wireless Access Points, (managed) Switches, etc. Perimeter Devices k\u00f6nnen zentrale Informationen \u00fcber Geschehnisse enthalten, sind aber unter Umst\u00e4nden nicht trivial auszuwerten.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7501c25 elementor-widget elementor-widget-text-editor\" data-id=\"7501c25\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Synonyme Begriffe: Protokolldatei, Ereignisprotokoll, Eventlog, log file, log.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0c1a6ee elementor-widget elementor-widget-heading\" data-id=\"0c1a6ee\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Praktische Relevanz<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-267a2b7 elementor-widget elementor-widget-text-editor\" data-id=\"267a2b7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Perimerterger\u00e4te enthalten oft Metadaten zur Kommunikation, die \u00fcber sie gelaufen ist. Entsprechend konfigurierte Ger\u00e4te k\u00f6nnen <a href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/log-files\/\" target=\"_blank\" rel=\"noopener\">Log Files<\/a> anlegen oder Log Events an einen zentralen Server sende. Lokale Log Files auf Perimeterger\u00e4ten werden nicht f\u00fcr unbeschr\u00e4nkte zeit vorgehalten. Bei vielen Systemen besteht eine Log Rotate System, das die Log Files zyklisch l\u00f6scht oder \u00fcberschreibt, um den beschr\u00e4nkten Speicherplatz auf den Perimeterger\u00e4ten zu verwalten. Dieses Problem kann mit den erw\u00e4hnten zentralen Log Servern behoben werden.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95f2a65 elementor-widget elementor-widget-text-editor\" data-id=\"95f2a65\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Ein enormes Problem f\u00fcr Unternehmen und damit auch f\u00fcr forensische Untersuchungen ist der Umstand, dass Defizite bei der Inventarisierung und Dokumentation der Perimeterger\u00e4te bestehen. Dazu kommt das Problem, dass das Personal unter Umst\u00e4nden in Eigenregie das Netzwerk erweitert und bspw. im eigenen B\u00fcro ohne R\u00fccksprache und Bewilligung einen Access Point installiert.<br><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-831a7ce elementor-widget elementor-widget-text-editor\" data-id=\"831a7ce\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\tPerimeterger\u00e4te sind oft selbst Gegenstand eines Angriffs, was in aller Regeln nicht von Beginn an bekannt ist. Bei angegriffene Perimeterger\u00e4ten muss in Betracht gezogen werden, dass die auf dem Ger\u00e4t gesicherten Artefakte durch die Angreiferschaft ver\u00e4ndert worden sein k\u00f6nnten. Die Sicherung von Spuren ab angegriffenen Perimeterger\u00e4ten bedarf besonderer Vorbereitung und einer Vorgehensweise, welche die weitere Ver\u00e4nderung durch die forensische Untersuchung vermeidet oder diese Ver\u00e4nderungen detailliert dokumentiert.<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_1');\" onkeypress=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_1');\" ><sup id=\"footnote_plugin_tooltip_1439_1_1\" class=\"footnote_plugin_tooltip_text\">1<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1439_1_1\" class=\"footnote_tooltip\"><span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 308;<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1439_1_1').tooltip({ tip: '#footnote_plugin_tooltip_text_1439_1_1', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-ca41b84\" data-id=\"ca41b84\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f6dbbe8 elementor-widget elementor-widget-page-title\" data-id=\"f6dbbe8\" data-element_type=\"widget\" data-widget_type=\"page-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\t\t<div class=\"hfe-page-title hfe-page-title-wrapper elementor-widget-heading\">\n\n\t\t\t\t\t\t\t\t<h6 class=\"elementor-heading-title elementor-size-default\">\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tOverview: \t\t\t\t\tPerimeter Devices  \n\t\t\t<\/h6 > \n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b9b78bf elementor-widget elementor-widget-shortcode\" data-id=\"b9b78bf\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><!-- Beginning of Link Library Output --><div id='linklist1' class='linklist'><!-- Div Linklist -->\n<div class=\"LinkLibraryCat LinkLibraryCat27 level0\"><!-- Div Category --><div id=\"quick-links\"><!-- Div Category Name --><div class=\"linklistcatname\"><!-- Div Cat Name --><span class=\"linklistcatclass\">Quick Links<\/span><\/div><!-- DivOrHeader --><\/div><!-- Div Category Name -->\n\t<ul>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/Perimeter_security\" id=\"link-2087\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">Wikipedia &#8220;Perimeter Security&#8221;<\/a><\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/DMZ_(computing)\" id=\"link-2088\" class=\"track_this_link \" rel=\"noopener noreferrer\" target=\"_blank\">Wikipedia &#8220;DMZ&#8221;<\/a><\/li>\n\t<\/ul>\n<\/div><!-- Div End Category -->\n<script type='text\/javascript'>\njQuery(document).ready(function()\n{\njQuery('.arrow-up').hide();\njQuery('#linklist1 a.track_this_link').click(function() {\nlinkid = this.id;\nlinkid = linkid.substring(5);\npath = '';\njQuery.ajax( {    type: 'POST',    url: 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-admin\/admin-ajax.php',     data: { action: 'link_library_tracker',             _ajax_nonce: 'e1ebdf9706',             id:linkid, xpath:path }     });\nreturn true;\n});\njQuery('#linklist1 .expandlinks').click(function() {\ntarget = '.' + jQuery(this).attr('id');\nsubcattarget = '.' + jQuery(this).attr('data-subcat');\nif ( jQuery( target ).is(':visible') ) {\njQuery(target).slideUp();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/expand-32.png');\n} else {\njQuery(target).slideDown();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/collapse-32.png');\n}\n});\njQuery('#linklist1 .linklistcatclass').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\njQuery('#linklist1 .linklistcatnamedesc').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\n});\n<\/script>\n<\/div><!-- Div Linklist -->\n<!-- End of Link Library Output -->\n\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-41d5e8f elementor-widget elementor-widget-shortcode\" data-id=\"41d5e8f\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><!-- Beginning of Link Library Output --><div id='linklist1' class='linklist'><!-- Div Linklist -->\n<div class=\"LinkLibraryCat LinkLibraryCat8 level0\"><!-- Div Category --><div id=\"data-sources\"><!-- Div Category Name --><div class=\"linklistcatname\"><!-- Div Cat Name --><span class=\"linklistcatclass\">Data Sources<\/span><\/div><!-- DivOrHeader --><\/div><!-- Div Category Name -->\n\t<ul>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0015\" id=\"link-1410\" class=\"track_this_link \" rel=\"noopener noreferrer\">Application Log (DS0015)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0025\" id=\"link-1412\" class=\"track_this_link \" rel=\"noopener noreferrer\">Cloud Service (DS0025)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0017\" id=\"link-1415\" class=\"track_this_link \" rel=\"noopener noreferrer\">Command (DS0017)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0038\" id=\"link-1417\" class=\"track_this_link \" rel=\"noopener noreferrer\">Domain Name (DS0038)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0016\" id=\"link-1418\" class=\"track_this_link \" rel=\"noopener noreferrer\">Drive (DS0016)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0022\" id=\"link-1420\" class=\"track_this_link \" rel=\"noopener noreferrer\">File (DS0022)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0018\" id=\"link-1421\" class=\"track_this_link \" rel=\"noopener noreferrer\">Firewall (DS0018)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0001\" id=\"link-1422\" class=\"track_this_link \" rel=\"noopener noreferrer\">Firmware (DS0001)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0007\" id=\"link-1424\" class=\"track_this_link \" rel=\"noopener noreferrer\">Image (DS0007)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0035\" id=\"link-1426\" class=\"track_this_link \" rel=\"noopener noreferrer\">Internet Scan (DS0035)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0008\" id=\"link-1427\" class=\"track_this_link \" rel=\"noopener noreferrer\">Kernel (DS0008)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0011\" id=\"link-1430\" class=\"track_this_link \" rel=\"noopener noreferrer\">Module (DS0011)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0029\" id=\"link-1433\" class=\"track_this_link \" rel=\"noopener noreferrer\">Network Traffic (DS0029)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0014\" id=\"link-1435\" class=\"track_this_link \" rel=\"noopener noreferrer\">Pod (DS0014)<\/a><\/li>\n<li><a href=\"https:\/\/cyber-kill-chain.ch\/datasources\/DS0013\" id=\"link-1439\" class=\"track_this_link \" rel=\"noopener noreferrer\">Sensor Health (DS0013)<\/a><\/li>\n\t<\/ul>\n<\/div><!-- Div End Category -->\n<script type='text\/javascript'>\njQuery(document).ready(function()\n{\njQuery('.arrow-up').hide();\njQuery('#linklist1 a.track_this_link').click(function() {\nlinkid = this.id;\nlinkid = linkid.substring(5);\npath = '';\njQuery.ajax( {    type: 'POST',    url: 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-admin\/admin-ajax.php',     data: { action: 'link_library_tracker',             _ajax_nonce: 'e1ebdf9706',             id:linkid, xpath:path }     });\nreturn true;\n});\njQuery('#linklist1 .expandlinks').click(function() {\ntarget = '.' + jQuery(this).attr('id');\nsubcattarget = '.' + jQuery(this).attr('data-subcat');\nif ( jQuery( target ).is(':visible') ) {\njQuery(target).slideUp();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/expand-32.png');\n} else {\njQuery(target).slideDown();\njQuery(subcattarget).slideToggle();\njQuery(this).children('img').attr('src', 'https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-content\/plugins\/link-library\/icons\/collapse-32.png');\n}\n});\njQuery('#linklist1 .linklistcatclass').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\njQuery('#linklist1 .linklistcatnamedesc').click(function() {\njQuery(this).siblings('.expandlinks').click();\n});\n});\n<\/script>\n<\/div><!-- Div Linklist -->\n<!-- End of Link Library Output -->\n\n<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-9933a31 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"9933a31\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-bdf1a42\" data-id=\"bdf1a42\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f39ed9a elementor-widget elementor-widget-heading\" data-id=\"f39ed9a\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Fundorte von Perimeter Devices<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48a0c58 elementor-widget elementor-widget-text-editor\" data-id=\"48a0c58\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Perimeter Devices finden sich oft hier:<\/p><ul><li>Verteilk\u00e4sten,<\/li><li>Serverr\u00e4ume,<\/li><li>einzelne B\u00fcros (insbesondere Switches und Access Points).<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-180ce1f\" data-id=\"180ce1f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-ca89d91 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ca89d91\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-3b7a335\" data-id=\"3b7a335\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b0f2e6 elementor-widget elementor-widget-heading\" data-id=\"5b0f2e6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Artefakte auf Perimeter Devices<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c99f350 elementor-widget elementor-widget-heading\" data-id=\"c99f350\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Switches<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-694beac elementor-widget elementor-widget-text-editor\" data-id=\"694beac\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><em>Managed Switches:<\/em><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1ce5a1c elementor-widget elementor-widget-text-editor\" data-id=\"1ce5a1c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><em>&#8220;Dumb&#8221; Switches:<\/em><\/p>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1084677 elementor-widget elementor-widget-heading\" data-id=\"1084677\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Router<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d0850b0 elementor-widget elementor-widget-text-editor\" data-id=\"d0850b0\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Auf dem internen Festspeicher (Flash, SSD, HDD):<\/p>\n<ul>\n<li>Logdateien,\n<ul>\n<li>System Logs,<\/li><li>Firewall Logs,<\/li><li>Access Logs,<br><\/li>\n<li>Terminallogins,<\/li>\n<li>Remote Logins (SSH etc. pp.),<\/li>\n<li>VPN-Dienst.<\/li>\n<\/ul>\n<\/li>\n<li>Kommandozeilen-History,<\/li>\n<li>Firewall-Regeln,<\/li>\n<li>NAT-Regeln,<\/li>\n<li>Dynamische Routingregeln.<\/li>\n<\/ul>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e415aea elementor-widget elementor-widget-text-editor\" data-id=\"e415aea\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Im Arbeitsspeicher<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_2');\" onkeypress=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_2');\" ><sup id=\"footnote_plugin_tooltip_1439_1_2\" class=\"footnote_plugin_tooltip_text\">2<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1439_1_2\" class=\"footnote_tooltip\">Vgl. <span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 308;<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1439_1_2').tooltip({ tip: '#footnote_plugin_tooltip_text_1439_1_2', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script>:<\/p><ul><li>ARP-Tabelle,<\/li><li>Dynamische Routingregeln,<\/li><li>bestehende Connections (TCP).<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-98296ed elementor-widget elementor-widget-text-editor\" data-id=\"98296ed\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Im Arbeitsspeicher<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_3');\" onkeypress=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_3');\" ><sup id=\"footnote_plugin_tooltip_1439_1_3\" class=\"footnote_plugin_tooltip_text\">3<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1439_1_3\" class=\"footnote_tooltip\">Vgl. <span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 308;<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1439_1_3').tooltip({ tip: '#footnote_plugin_tooltip_text_1439_1_3', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script>:<\/p><ul><li>ARP-Tabelle,<\/li><li>Dynamische Routingregeln,<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-61242c6 elementor-widget elementor-widget-heading\" data-id=\"61242c6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Access Point<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-14fd7d3 elementor-widget elementor-widget-heading\" data-id=\"14fd7d3\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Firewalls<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6bb5d4b elementor-widget elementor-widget-heading\" data-id=\"6bb5d4b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Web Application Firewall<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-c286dd7\" data-id=\"c286dd7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3bdf616 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"3bdf616\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-acba6bb\" data-id=\"acba6bb\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7cead84 elementor-widget elementor-widget-heading\" data-id=\"7cead84\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Praktische Vorgehensweise \/ Beweissicherungsprinzipien<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-57be22f elementor-widget elementor-widget-text-editor\" data-id=\"57be22f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Folgende Prinzipien sollten eingehalten werden:<\/p>\n<ul>\n<li>Die forensischen Grunds\u00e4tze gelten bei Log Files uneiengeschr\u00e4nkt;<\/li>\n<li>Administrtoren\/Owner von Log Files oder Systemen mit relevanten Log Files oder von zentralen Log Verwaltungsinstanzen d\u00fcrfen nicht die eigenen untersuchungen f\u00fchren (vgl. )<\/li>\n<li>Log Files m\u00fcssen in einem Kontext betrachtet und analysiert werden: Es m\u00fcssen gleichzeitig mit der Lig File-Sicherung aktuelle Netzwerktopologien herausverlangt oder erstellt werden; anders lassen sich viele netzwerktechnische Sachverhalte nicht interpretieren<\/li>\n<li>&nbsp;&#8230;<\/li>\n<\/ul>\n<div>Angegriffene Perimeterger\u00e4te:<\/div>\n<ul>\n<li>Das Ger\u00e4t sollte nach M\u00f6glichkeit nicht abgeschaltet werden, damit man vorhandene Terminalsessions und allenfalls den Arbeitsspeicher sichern kann<span class=\"footnote_referrer\"><a role=\"button\" tabindex=\"0\" onclick=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_4');\" onkeypress=\"footnote_moveToReference_1439_1('footnote_plugin_reference_1439_1_4');\" ><sup id=\"footnote_plugin_tooltip_1439_1_4\" class=\"footnote_plugin_tooltip_text\">4<\/sup><\/a><span id=\"footnote_plugin_tooltip_text_1439_1_4\" class=\"footnote_tooltip\"><span class=\"autor-continuous-text\">Barrios Ritar und Signori Yuri<\/span> in <span class=\"autor-continuous-text\">Bayuk<\/span>, S. 103 ff.; <span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 309 mit einer kleinen Befehlssammlung f\u00fcr Cisco-Router (Stand 2014), S. 309 und 310f.<\/span><\/span><script type=\"text\/javascript\"> jQuery('#footnote_plugin_tooltip_1439_1_4').tooltip({ tip: '#footnote_plugin_tooltip_text_1439_1_4', tipClass: 'footnote_tooltip', effect: 'fade', predelay: 0, fadeInSpeed: 200, delay: 400, fadeOutSpeed: 200, position: 'top center', relative: true, offset: [-7, 0], });<\/script>,<\/li>\n<\/ul>\n<div>&nbsp;<\/div>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-e06d72f\" data-id=\"e06d72f\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7b74179 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7b74179\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-5bccb6d\" data-id=\"5bccb6d\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0a2cf09 elementor-widget elementor-widget-heading\" data-id=\"0a2cf09\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Weitere Materialien<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-256b16c elementor-widget elementor-widget-text-editor\" data-id=\"256b16c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li><a href=\"https:\/\/it-forensik.fiw.hs-wismar.de\/index.php\/Web-Application-Firewall\" target=\"_blank\" rel=\"noopener\">https:\/\/it-forensik.fiw.hs-wismar.de\/index.php\/Web-Application-Firewall<\/a><\/li><\/ul>\t\t\t\t<style>\/*! elementor - v3.5.4 - 23-01-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4044c9b elementor-widget elementor-widget-shortcode\" data-id=\"4044c9b\" data-element_type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-shortcode\"><div class=\"speaker-mute footnotes_reference_container\"> <div class=\"footnote_container_prepare\"><h5><span role=\"button\" tabindex=\"0\" class=\"footnote_reference_container_label pointer\" onclick=\"footnote_expand_collapse_reference_container_1439_1();\">Referenzen<\/span><span role=\"button\" tabindex=\"0\" class=\"footnote_reference_container_collapse_button\" style=\"display: none;\" onclick=\"footnote_expand_collapse_reference_container_1439_1();\">[<a id=\"footnote_reference_container_collapse_button_1439_1\">+<\/a>]<\/span><\/h5><\/div> <div id=\"footnote_references_container_1439_1\" style=\"\"><table class=\"footnotes_table footnote-reference-container\"><caption class=\"accessibility\">Referenzen<\/caption> <tbody> \r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi pointer\"  onclick=\"footnote_moveToAnchor_1439_1('footnote_plugin_tooltip_1439_1_1');\"><a id=\"footnote_plugin_reference_1439_1_1\" class=\"footnote_backlink\"><span class=\"footnote_index_arrow\">&#8593;<\/span>1<\/a><\/th> <td class=\"footnote_plugin_text\"><span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 308;<\/td><\/tr>\r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi\" ><a id=\"footnote_plugin_reference_1439_1_2\" class=\"footnote_backlink\" onclick=\"footnote_moveToAnchor_1439_1('footnote_plugin_tooltip_1439_1_2');\"><span class=\"footnote_index_arrow\">&#8593;<\/span>2,<\/a> <a id=\"footnote_plugin_reference_1439_1_3\" class=\"footnote_backlink\" onclick=\"footnote_moveToAnchor_1439_1('footnote_plugin_tooltip_1439_1_3');\"><span class=\"footnote_index_arrow\">&#8593;<\/span>3<\/a><\/th> <td class=\"footnote_plugin_text\">Vgl. <span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 308;<\/td><\/tr>\r\n\r\n<tr class=\"footnotes_plugin_reference_row\"> <th scope=\"row\" class=\"footnote_plugin_index_combi pointer\"  onclick=\"footnote_moveToAnchor_1439_1('footnote_plugin_tooltip_1439_1_4');\"><a id=\"footnote_plugin_reference_1439_1_4\" class=\"footnote_backlink\"><span class=\"footnote_index_arrow\">&#8593;<\/span>4<\/a><\/th> <td class=\"footnote_plugin_text\"><span class=\"autor-continuous-text\">Barrios Ritar und Signori Yuri<\/span> in <span class=\"autor-continuous-text\">Bayuk<\/span>, S. 103 ff.; <span class=\"autor-continuous-text\">Geschonneck<\/span>, S. 309 mit einer kleinen Befehlssammlung f\u00fcr Cisco-Router (Stand 2014), S. 309 und 310f.<\/td><\/tr>\r\n\r\n <\/tbody> <\/table> <\/div><\/div><script type=\"text\/javascript\"> function footnote_expand_reference_container_1439_1() { jQuery('#footnote_references_container_1439_1').show(); jQuery('#footnote_reference_container_collapse_button_1439_1').text('\u2212'); } function footnote_collapse_reference_container_1439_1() { jQuery('#footnote_references_container_1439_1').hide(); jQuery('#footnote_reference_container_collapse_button_1439_1').text('+'); } function footnote_expand_collapse_reference_container_1439_1() { if (jQuery('#footnote_references_container_1439_1').is(':hidden')) { footnote_expand_reference_container_1439_1(); } else { footnote_collapse_reference_container_1439_1(); } } function footnote_moveToReference_1439_1(p_str_TargetID) { footnote_expand_reference_container_1439_1(); var l_obj_Target = jQuery('#' + p_str_TargetID); if (l_obj_Target.length) { jQuery( 'html, body' ).delay( 0 ); jQuery('html, body').animate({ scrollTop: l_obj_Target.offset().top - window.innerHeight * 0.2 }, 380); } } function footnote_moveToAnchor_1439_1(p_str_TargetID) { footnote_expand_reference_container_1439_1(); var l_obj_Target = jQuery('#' + p_str_TargetID); if (l_obj_Target.length) { jQuery( 'html, body' ).delay( 0 ); jQuery('html, body').animate({ scrollTop: l_obj_Target.offset().top - window.innerHeight * 0.2 }, 380); } }<\/script><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-31bb7f0\" data-id=\"31bb7f0\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Perimeter Devices Definition und Begriff Ger\u00e4te, die Netzwerkteile verbinden, werden als Perimeter Devices bezeichnet. Darunter fallen Router, Wireless Access Points, (managed) Switches, etc. Perimeter Devices k\u00f6nnen zentrale Informationen \u00fcber Geschehnisse enthalten, sind aber unter Umst\u00e4nden nicht trivial auszuwerten. Synonyme Begriffe: Protokolldatei, Ereignisprotokoll, Eventlog, log file, log. Praktische Relevanz Perimerterger\u00e4te enthalten oft Metadaten zur Kommunikation, die [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":1000,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":[],"yoast_head":"<title>Perimeter Devices - forensics.cyber-kill-chain.ch<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Perimeter Devices - forensics.cyber-kill-chain.ch\" \/>\n<meta property=\"og:description\" content=\"Perimeter Devices Definition und Begriff Ger\u00e4te, die Netzwerkteile verbinden, werden als Perimeter Devices bezeichnet. Darunter fallen Router, Wireless Access Points, (managed) Switches, etc. Perimeter Devices k\u00f6nnen zentrale Informationen \u00fcber Geschehnisse enthalten, sind aber unter Umst\u00e4nden nicht trivial auszuwerten. Synonyme Begriffe: Protokolldatei, Ereignisprotokoll, Eventlog, log file, log. Praktische Relevanz Perimerterger\u00e4te enthalten oft Metadaten zur Kommunikation, die [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/\" \/>\n<meta property=\"og:site_name\" content=\"forensics.cyber-kill-chain.ch\" \/>\n<meta property=\"article:modified_time\" content=\"2022-01-13T13:59:50+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 Minuten\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website\",\"url\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\",\"name\":\"forensics.cyber-kill-chain.ch\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"de-CH\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/#webpage\",\"url\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/\",\"name\":\"Perimeter Devices - forensics.cyber-kill-chain.ch\",\"isPartOf\":{\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website\"},\"datePublished\":\"2021-12-19T18:50:30+00:00\",\"dateModified\":\"2022-01-13T13:59:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/#breadcrumb\"},\"inLanguage\":\"de-CH\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cyber Kill Chain Forensics | LAYER 8\",\"item\":\"https:\/\/forensics.cyber-kill-chain.ch\/bin\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Perimeter Devices\"}]}]}<\/script>","yoast_head_json":{"title":"Perimeter Devices - forensics.cyber-kill-chain.ch","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/","og_locale":"de_DE","og_type":"article","og_title":"Perimeter Devices - forensics.cyber-kill-chain.ch","og_description":"Perimeter Devices Definition und Begriff Ger\u00e4te, die Netzwerkteile verbinden, werden als Perimeter Devices bezeichnet. Darunter fallen Router, Wireless Access Points, (managed) Switches, etc. Perimeter Devices k\u00f6nnen zentrale Informationen \u00fcber Geschehnisse enthalten, sind aber unter Umst\u00e4nden nicht trivial auszuwerten. Synonyme Begriffe: Protokolldatei, Ereignisprotokoll, Eventlog, log file, log. Praktische Relevanz Perimerterger\u00e4te enthalten oft Metadaten zur Kommunikation, die [&hellip;]","og_url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/","og_site_name":"forensics.cyber-kill-chain.ch","article_modified_time":"2022-01-13T13:59:50+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 Minuten"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website","url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/","name":"forensics.cyber-kill-chain.ch","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"de-CH"},{"@type":"WebPage","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/#webpage","url":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/","name":"Perimeter Devices - forensics.cyber-kill-chain.ch","isPartOf":{"@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/#website"},"datePublished":"2021-12-19T18:50:30+00:00","dateModified":"2022-01-13T13:59:50+00:00","breadcrumb":{"@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/#breadcrumb"},"inLanguage":"de-CH","potentialAction":[{"@type":"ReadAction","target":["https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/forensic-domains\/perimeter-devices\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/"},{"@type":"ListItem","position":2,"name":"Cyber Kill Chain Forensics | LAYER 8","item":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/"},{"@type":"ListItem","position":3,"name":"Perimeter Devices"}]}]}},"_links":{"self":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/462"}],"collection":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/comments?post=462"}],"version-history":[{"count":79,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/462\/revisions"}],"predecessor-version":[{"id":2642,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/462\/revisions\/2642"}],"up":[{"embeddable":true,"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/pages\/1000"}],"wp:attachment":[{"href":"https:\/\/forensics.cyber-kill-chain.ch\/bin\/wp-json\/wp\/v2\/media?parent=462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}