{"id":135927,"date":"2026-10-15T10:59:50","date_gmt":"2026-10-15T02:59:50","guid":{"rendered":"https:\/\/version-2.com\/?p=135927"},"modified":"2026-10-15T11:05:46","modified_gmt":"2026-10-15T03:05:46","slug":"%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/","title":{"rendered":"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"135927\" class=\"elementor elementor-135927\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-71ae5294 post-content elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"71ae5294\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;c4a899f&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:0,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1e9119cd\" data-id=\"1e9119cd\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4f04f8cb elementor-widget elementor-widget-text-editor\" data-id=\"4f04f8cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-medium\" src=\"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg\" width=\"1600\" height=\"900\" \/><\/p><h3>\u6f0f\u6d1e\u5256\u6790\uff1a\u63ed\u9732\u5f71\u5b50 RMM \u4e2d\u7684 Backstage Shell<\/h3><p>\u5118\u7ba1\u4eba\u5de5\u667a\u6167\u6301\u7e8c\u4f54\u64da\u7db2\u8def\u5b89\u5168\u51fa\u7248\u7269\u8207\u6703\u8b70\u8b70\u7a0b\u7684\u982d\u689d\uff0c\u4f46\u5be6\u969b\u60c5\u6cc1\u537b\u622a\u7136\u4e0d\u540c\u3002\u7576\u9632\u79a6\u8005\u7af6\u76f8\u5efa\u7acb\u6a5f\u5668\u5b78\u7fd2\u6a21\u578b\u8207\u81ea\u4e3b\u9632\u79a6\u7cfb\u7d71\u6642\uff0c\u5a01\u8105\u884c\u70ba\u8005\u6b63\u6084\u6084\u5730\u5229\u7528\u5982 Backstage Shell \u9019\u7a2e\u50b3\u7d71\u4e14\u5177\u9ad8\u5ea6\u898f\u907f\u6027\u7684\u6280\u8853\uff0c\u7b56\u5283\u6bc0\u6ec5\u6027\u7684\u653b\u64ca\u3002<\/p><p>\u8fd1\u671f\u7684\u71df\u904b\u6578\u64da\u51f8\u986f\u4e86\u4e00\u500b\u6b98\u9177\u7684\u4e8b\u5be6\uff1a\u50b3\u7d71\u7684\u653b\u64ca\u5a92\u4ecb\u4e26\u672a\u6d88\u5931\uff0c\u53cd\u800c\u8b8a\u5f97\u66f4\u52a0\u96b1\u853d\u8207\u8907\u96dc\u3002\u5982\u4eca\u6700\u5177\u7834\u58de\u6027\u7684\u52d2\u7d22\u8edf\u9ad4\u4e8b\u4ef6\uff0c\u4f9d\u7136\u662f\u53d7\u5230\u672a\u53d7\u7ba1\u7684\u8cc7\u7522\u3001\u6191\u8b49\u906d\u7aca\u3001\u767b\u9304\u6a94\u6f0f\u6d1e\u5229\u7528\uff0c\u4ee5\u53ca\u5408\u6cd5\u9060\u7aef\u76e3\u63a7\u8207\u7ba1\u7406 (RMM) \u5de5\u5177\u6b66\u5668\u5316\u6240\u63a8\u52d5\u3002<\/p><p>\u672c\u6848\u4f8b\u7814\u7a76\u5256\u6790\u4e86\u4e00\u8d77\u56b4\u91cd\u7684\u5165\u4fb5\u4e8b\u4ef6\uff0c\u4e26\u767c\u51fa\u5f37\u70c8\u63d0\u9192\uff1a\u5373\u4f7f\u5728 AI \u9a45\u52d5\u7684\u4e16\u754c\u4e2d\uff0c\u4fdd\u8b77\u6838\u5fc3\u57fa\u790e\u67b6\u69cb\u4ecd\u662f\u6211\u5011\u6700\u91cd\u8981\u7684\u4e00\u9053\u9632\u7dda\u3002<\/p><div class=\"notice\"><strong>\u4f5c\u8005\u8a3b\uff1a<\/strong>\u7279\u5b9a\u540d\u7a31\u3001\u6a94\u6848\u8def\u5f91\u8207\u76f8\u95dc\u8cc7\u7522\u5df2\u7d93\u904e\u906e\u853d\u4ee5\u4fdd\u8b77\u53d7\u5bb3\u8005\u3002\u7136\u800c\uff0c\u5165\u4fb5\u6307\u6a19 (IoC) \u4ecd\u53cd\u6620\u4e86\u4e8b\u4ef6\u4e2d\u7684\u78ba\u5207\u6578\u64da\u3002<\/div><h2>\u4e8b\u4ef6\u6982\u8ff0\u8207\u5a01\u8105\u5f62\u52e2<\/h2><p>\u5728\u6700\u8fd1\u4e00\u6b21\u7684\u4e8b\u4ef6\u56de\u61c9\u884c\u52d5\u4e2d\uff0c\u6211\u5011\u7684\u8a17\u7ba1\u5075\u6e2c\u8207\u56de\u61c9 (MDR) \u5718\u968a\u6210\u529f\u6514\u622a\u4e26\u6d88\u9664\u4e86\u4e00\u8d77\u91dd\u5c0d\u4f01\u696d Active Directory \u74b0\u5883 (<code>VICTIM.local<\/code>) \u4e14\u7d44\u7e54\u56b4\u5bc6\u7684\u591a\u968e\u6bb5\u653b\u64ca\u3002<\/p><p>\u8a72\u653b\u64ca\u5728\u6578\u5929\u5167\u5c55\u958b\uff0c\u59cb\u65bc\u4e00\u500b\u5e36\u6709\u7c3d\u7ae0\u7684\u5ee3\u544a\u8edf\u9ad4\u4e0b\u8f09\u5668\u3002\u96a8\u5f8c\u8fc5\u901f\u5347\u7d1a\u70ba\u5168\u9762\u7684\u7db2\u57df\u63a5\u7ba1\uff0c\u900f\u904e\u906d\u6feb\u7528\u7684 RMM \u8edf\u9ad4\u5be6\u73fe\u96b1\u853d\u7684\u6301\u7e8c\u6027\uff0c\u6700\u7d42\u4ee5\u91dd\u5c0d\u7d44\u7e54\u95dc\u9375\u5c08\u6848\u8207 CAD \u5132\u5b58\u5171\u7528 (<code>D:\\DATA_SHARES\\<\/code>) \u7684\u5927\u898f\u6a21\u52d2\u7d22\u8edf\u9ad4\u90e8\u7f72\u544a\u7d42\u3002<\/p><div class=\"cta\"><h3>\u5728\u9078\u64c7\u5b89\u5168\u65b9\u6848\u524d\u9700\u8981\u5c08\u5bb6\u6307\u5c0e\u55ce\uff1f<\/h3><p>\u76f4\u63a5\u8207\u5c08\u5bb6\u5c0d\u8a71\u3002\u514d\u586b\u8868\u55ae\uff0c\u7121\u9700\u7b49\u5f85\uff0c\u4e5f\u4e0d\u9700\u8981 Slack \u5e33\u865f\u3002<\/p><\/div><h2>\u6838\u5fc3\u4e8b\u4ef6\u4eae\u9ede<\/h2><ul><li><strong>\u900f\u904e\u5e36\u6709\u7c3d\u7ae0\u7684\u4e0b\u8f09\u5668\u898f\u907f\u5075\u6e2c\uff1a<\/strong> \u653b\u64ca\u8005\u900f\u904e\u6295\u653e\u4e00\u500b\u7531\u8a8d\u53ef\u6a5f\u69cb (ASK.COM) \u5408\u6cd5\u7c3d\u7f72\u7684\u57f7\u884c\u6a94 (<code>ApnStub.exe<\/code>)\uff0c\u7e5e\u904e\u4e86\u975c\u614b\u7279\u5fb5\u78bc\u8207\u521d\u59cb\u700f\u89bd\u5668\u9632\u8b77\u3002<\/li><li><strong>Syskey \u64f7\u53d6\u8207\u96dc\u6e4a\u89e3\u5bc6\uff1a<\/strong> \u653b\u64ca\u8005\u5229\u7528\u7db2\u8def\u4e0a\u7121\u4ee3\u7406\u7a0b\u5f0f\u7684\u672a\u53d7\u7ba1\u88dd\u7f6e\uff0c\u67e5\u8a62\u4e86\u6b21\u8981\u7db2\u57df\u63a7\u5236\u7ad9 (DC-02) \u4e0a\u7684\u767b\u9304\u6a94\u6a5f\u5bc6 (<code>HKLM\\SYSTEM\\...\\Lsa<\/code>)\u3002\u9019\u4f7f\u4ed6\u5011\u5f97\u4ee5\u91cd\u5efa 16 \u4f4d\u5143\u7d44\u7684 Syskey\uff0c\u4e26\u653b\u9677\u4e3b\u8981\u7db2\u57df\u7ba1\u7406\u54e1\u5e33\u6236 (<code>ADM_DOMAIN<\/code>)\u3002<\/li><li><strong>\u96b1\u853d\u7684 RMM \u6feb\u7528\uff1a<\/strong> \u653b\u64ca\u8005\u5229\u7528 ConnectWise ScreenConnect \u7684 Backstage \u6a21\u5f0f (<code>ScreenConnect.WindowsBackstageShell.exe<\/code>) \u4fdd\u6301\u6df1\u5ea6\u7684\u6301\u7e8c\u6027\u3002\u5b83\u5728\u6b21\u8981\u684c\u9762\u5de5\u4f5c\u968e\u6bb5\u4e2d\u96b1\u5f62\u904b\u884c (<code>hasVisibleWindow: false<\/code>)\uff0c\u90e8\u7f72\u4e86\u7cfb\u7d71\u7d1a\u9375\u76e4\u639b\u9264 (<code>SetWindowsHookEx<\/code>)\uff0c\u6700\u7d42\u89f8\u767c\u4e86 EDR \u5c0d\u96b1\u853d\u9375\u76e4\u5074\u9304\u7684\u8b66\u5831\u3002<\/li><li><strong>\u672a\u53d7\u7ba1\u8cc7\u7522\u7684\u76f2\u9ede\uff1a<\/strong> \u95dc\u9375\u5728\u65bc\uff0c\u5927\u898f\u6a21 SMB \u52a0\u5bc6\u8207\u8de8\u7db2\u8def\u6307\u4ee4\u5b8c\u5168\u662f\u7531\u8655\u65bc\u7d44\u7e54 EDR \u8986\u84cb\u7bc4\u570d\u4e4b\u5916\u7684\u60e1\u610f\u672a\u53d7\u7ba1 IP \u4f4d\u5740 (<code>10.10.10.177<\/code> \u8207 <code>10.10.10.158<\/code>) \u6240\u57f7\u884c\u7684\u3002<\/li><\/ul><h2>\u5165\u4fb5\u6642\u9593\u8ef8<\/h2><p><em>\u6ce8\u610f\uff1a\u70ba\u4e86\u4fdd\u8b77\u96b1\u79c1\uff0c\u65e5\u671f\u8207\u6642\u9593\u6233\u8a18\u5df2\u9032\u884c\u4fee\u6539\uff0c\u4f46\u9806\u5e8f\u8207\u78ba\u5207\u9593\u9694\u4fdd\u6301\u4e0d\u8b8a\u3002<\/em><\/p><table><thead><tr><th>\u65e5\u671f\u8207\u6642\u9593 (UTC)<\/th><th>\u653b\u64ca\u968e\u6bb5<\/th><th>\u76ee\u6a19 \/ \u60c5\u5883<\/th><th>\u6280\u8853\u6458\u8981<\/th><\/tr><\/thead><tbody><tr><td>2026 \u5e74 5 \u6708 12 \u65e5 &#8211; 00:05:00<\/td><td>\u521d\u59cb\u5165\u4fb5<\/td><td>WKSTN-P01 (10.10.10.29)<br \/><em>VICTIM\\user_alpha<\/em><\/td><td><strong>\u96f6\u865f\u75c5\u4eba\uff1a<\/strong> \u5728\u4f7f\u7528\u8005\u7684 Documents \u8cc7\u6599\u593e\u4e2d\u57f7\u884c\u5e36\u6709\u7c3d\u7ae0\u7684 <code>ApnStub.exe<\/code> \u4e0b\u8f09\u5668\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 15 \u65e5 &#8211; 08:11:26<\/td><td>\u6191\u8b49\u5b58\u53d6<\/td><td>DC-02 (10.10.10.11)<br \/><em>VICTIM\\adm_local<\/em><\/td><td><strong>\u767b\u9304\u6a94\u67e5\u8a62\uff1a<\/strong> \u672a\u53d7\u7ba1\u7bc0\u9ede (10.10.10.177) \u5c0d DC-02 \u7684 LSA \u7d50\u69cb\u767c\u8d77\u9060\u7aef RPC \u67e5\u8a62\uff0c\u4ee5\u64f7\u53d6 Syskey \u4e3b\u8981\u91d1\u9470\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 15 \u65e5 &#8211; 08:57:53<\/td><td>\u6a6b\u5411\u79fb\u52d5<\/td><td>HYPERV-01 (10.10.10.166)<br \/><em>NT AUTHORITY\\SYSTEM<\/em><\/td><td><strong>\u4e92\u52d5\u5f0f WinRM\uff1a<\/strong> \u653b\u64ca\u8005\u900f\u904e <code>wsmprovhost.exe<\/code> \u5229\u7528\u5df2\u653b\u9677\u7684 ADM_DOMAIN \u6191\u8b49\uff0c\u5f37\u5236\u5728\u6574\u500b\u7db2\u57df\u5167\u555f\u7528 RDP\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 15 \u65e5 &#8211; 17:09:00<\/td><td>\u5075\u5bdf<\/td><td>DC-01 (10.10.10.20)<br \/><em>VICTIM\\adm_domain<\/em><\/td><td><strong>\u7db2\u8def\u6383\u63cf\uff1a<\/strong> \u5728 DC-01 \u4e0a\u57f7\u884c <code>ipscan24.exe<\/code> \u4ee5\u6620\u5c04 \/24 \u5b50\u7db2\u8def\u4e26\u627e\u51fa SMB \u5171\u7528\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 16 \u65e5 &#8211; 11:17:55<\/td><td>\u6709\u6548\u8ca0\u8f09\u66ab\u5b58<\/td><td>DC-01 (10.10.10.20)<br \/><em>VICTIM\\adm_domain<\/em><\/td><td><strong>\u57f7\u884c\u5617\u8a66\uff1a<\/strong> EDR \u6210\u529f\u6a19\u8a18\u4e26\u963b\u64cb\u4e86\u65e9\u671f\u7684\u672a\u7c3d\u7f72\u52d2\u7d22\u8edf\u9ad4\u66ab\u5b58\u6a94\u6848\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 16 \u65e5 &#8211; 13:43:43<\/td><td>\u7db2\u8def\u63a2\u7d22<\/td><td>WKSTN-P01 (10.10.10.29)<br \/><em>VICTIM\\user_alpha<\/em><\/td><td><strong>\u76ee\u9304\u63a2\u6e2c\uff1a<\/strong> \u5f9e WKSTN-P01 \u5411 DC-01 (10.10.10.62) \u767c\u8d77 LDAP \u67e5\u8a62\u8207 SMB \u6aa2\u67e5\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 16 \u65e5 &#8211; 13:48:33<\/td><td>\u6301\u7e8c\u6027 \/ \u898f\u907f<\/td><td>WKSTN-P01 (10.10.10.29)<br \/><em>NT AUTHORITY\\SYSTEM<\/em><\/td><td><strong>Backstage \u639b\u9264\uff1a<\/strong> <code>ScreenConnect.WindowsBackstageShell.exe<\/code> \u9023\u7dda\u81f3\u9060\u7aef C2 \u4e2d\u7e7c\u4e26\u5b89\u88dd\u5168\u57df\u9375\u76e4\u639b\u9264\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 16 \u65e5 &#8211; 13:48:34<\/td><td>\u6191\u8b49\u5b58\u53d6<\/td><td>WKSTN-P01 (10.10.10.29)<br \/><em>NT AUTHORITY\\SYSTEM<\/em><\/td><td><strong>LSASS \u63a7\u5236\u4ee3\u78bc\uff1a<\/strong> Backstage \u8655\u7406\u7a0b\u5e8f\u8acb\u6c42\u91dd\u5c0d <code>lsass.exe<\/code> \u8207 <code>lsaiso.exe<\/code> (Credential Guard) \u7684\u63a7\u5236\u4ee3\u78bc\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 16 \u65e5 &#8211; 14:32:03<\/td><td>\u672c\u6a5f\u5f71\u97ff<\/td><td>WKSTN-P01 (10.10.10.29)<br \/><em>VICTIM\\adm_domain<\/em><\/td><td><strong>\u52d2\u7d22\u52d2\u7d22\u8a0a\u606f\uff1a<\/strong> <code>akira_readme.txt<\/code> \u88ab\u653e\u7f6e\u5728\u6b21\u8981\u4f7f\u7528\u8005\u7684\u672c\u6a5f\u8cc7\u6599\u593e\u4e2d\u3002<\/td><\/tr><tr><td>2026 \u5e74 5 \u6708 16 \u65e5 &#8211; 14:32:43<\/td><td>\u5927\u898f\u6a21\u52a0\u5bc6<\/td><td>12 \u500b\u53d7\u7ba1\u8cc7\u7522<br \/><em>VICTIM\\adm_domain<\/em><\/td><td><strong>Akira \u7206\u767c\uff1a<\/strong> \u5f9e\u672a\u53d7\u7ba1\u7bc0\u9ede (10.10.10.158) \u767c\u8d77\u5927\u898f\u6a21 SMB \u52a0\u5bc6\uff0c\u76ee\u6a19\u70ba\u95dc\u9375\u5132\u5b58\u5171\u7528\u3002<\/td><\/tr><\/tbody><\/table><h2>\u6280\u8853\u6df1\u5ea6\u5256\u6790\u8207\u9451\u8b58\u5206\u6790<\/h2><h3>\u96f6\u865f\u75c5\u4eba\u8207\u521d\u59cb\u5165\u4fb5 (WKSTN-P01)<\/h3><p>\u6f0f\u6d1e\u6e90\u65bc\u5de5\u4f5c\u7ad9 WKSTN-P01 (10.10.10.29)\u3002\u9059\u6e2c\u6578\u64da\u66b4\u9732\u4e86 Ask Partner Network \u5b89\u88dd\u7a0b\u5f0f\u5b58\u6839\u7684\u57f7\u884c\uff1a<\/p><ul><li><strong>\u8def\u5f91\uff1a<\/strong> <code>\\Device\\HarddiskVolume3\\Users\\user_alpha\\Documents\\ApnStub.exe<\/code><\/li><li><strong>\u7c3d\u7ae0\u72c0\u614b\uff1a<\/strong> \u6709\u6548\u6578\u4f4d\u7c3d\u7ae0 (ASK.COM)<\/li><\/ul><p>\u5c0d\u624b\u7d93\u5e38\u5229\u7528\u5e36\u6709\u7c3d\u7ae0\u7684\u5ee3\u544a\u8edf\u9ad4\u6216\u7d91\u7d81\u7684\u8edf\u9ad4\u5b58\u6839\u4f86\u6e9c\u904e\u908a\u754c\u9632\u79a6\u3002\u96d6\u7136 <code>ApnStub.exe<\/code> \u672c\u8eab\u4e26\u975e\u60e1\u610f\u8edf\u9ad4\uff0c\u4f46\u5b83\u7684\u5b58\u5728\u4f7f\u5a01\u8105\u884c\u70ba\u8005\u5f97\u4ee5\u53d6\u5f97\u4f4e\u6b0a\u9650\u7684\u7acb\u8db3\u9ede\uff0c\u4e26\u958b\u59cb\u6536\u96c6\u672c\u6a5f\u6191\u8b49\u3002<\/p><h3>Syskey \u67e5\u8a62\u8207\u4e3b\u8981\u91d1\u9470\u64f7\u53d6 (DC-02)<\/h3><p>\u5230\u4e86 5 \u6708 15 \u65e5\uff0c\u653b\u64ca\u8005\u5df2\u5c07\u6b0a\u9650\u63d0\u5347\u81f3\u7db2\u57df\u7b49\u7d1a\u3002\u4ed6\u5011\u4f7f\u7528\u5df2\u906d\u653b\u9677\u7684\u672c\u6a5f\u6191\u8b49 (<code>VICTIM\\adm_local<\/code>)\uff0c\u5f9e\u60e1\u610f IP (10.10.10.177) \u91dd\u5c0d\u7db2\u57df\u63a7\u5236\u7ad9 DC-02 \u767c\u8d77\u9060\u7aef RPC \u67e5\u8a62\u3002<\/p><p><strong>Syskey \u7684\u4f5c\u7528\uff1a<\/strong> \u5728 Windows \u74b0\u5883\u4e2d\uff0c\u5b89\u5168\u5e33\u6236\u7ba1\u7406\u54e1 (SAM) \u8207 NTDS.dit \u5167\u7684\u5bc6\u78bc\u96dc\u6e4a\u662f\u4f7f\u7528\u4f4d\u65bc <code>HKLM\\SYSTEM\\CurrentControlSet\\Control\\Lsa<\/code> \u7684\u555f\u52d5\u91d1\u9470 (Syskey) \u9032\u884c\u52a0\u5bc6\u7684\u3002\u5982\u679c\u6c92\u6709\u6b64\u91d1\u9470\uff0c\u5c31\u7121\u6cd5\u96e2\u7dda\u64f7\u53d6\u96dc\u6e4a\u3002\u653b\u64ca\u8005\u90e8\u7f72\u4e86\u4e00\u500b\u81ea\u8a02\u516c\u7528\u7a0b\u5f0f\u4f86\u67e5\u8a62\u7279\u5b9a\u7684 LSA \u503c (JD\u3001Skew1\u3001GBG \u8207 Data)\uff0c\u6210\u529f\u7d44\u5408\u51fa 16 \u4f4d\u5143\u7d44\u7684 Syskey\u3002\u9019\u76f4\u63a5\u5c0e\u81f4\u7db2\u57df\u96dc\u6e4a\u906d\u96e2\u7dda\u89e3\u5bc6\uff0c\u4e26\u653b\u9677\u4e86 <code>VICTIM\\adm_domain<\/code>\u3002<\/p><h3>\u898f\u907f\u5f0f\u6301\u7e8c\u6027\uff1aScreenConnect Backstage Shell<\/h3><p>\u70ba\u4e86\u78ba\u4fdd\u5177\u6709\u97cc\u6027\u7684\u5b58\u53d6\uff0c\u653b\u64ca\u8005\u52ab\u6301\u4e86\u53d7\u5bb3\u8005\u5408\u6cd5\u7684 ConnectWise ScreenConnect \u5b89\u88dd\u30025 \u6708 16 \u65e5\uff0c\u8a72\u670d\u52d9\u884d\u751f\u4e86 <code>ScreenConnect.WindowsBackstageShell.exe<\/code>\u3002<\/p><p><strong>\u70ba\u4f55 EDR \u6355\u6349\u5230\u4e86\u9375\u76e4\u5074\u9304\u7a0b\u5f0f\uff1a<\/strong> ScreenConnect \u7684 &#8220;Backstage&#8221; \u529f\u80fd\u5141\u8a31 IT \u4eba\u54e1\u5728\u6d3b\u52d5\u4f7f\u7528\u8005\u5de5\u4f5c\u968e\u6bb5\u80cc\u5f8c\u64cd\u4f5c\u7d42\u7aef\uff0c\u4e14\u4e0d\u6703\u6e32\u67d3 UI \u5143\u7d20\u3002\u70ba\u4e86\u64f7\u53d6\u5be6\u9ad4\u6309\u9375\u8f38\u5165\u4e26\u5c07\u5176\u8def\u7531\u81f3\u9019\u500b\u96b1\u5f62\u7684\u7d42\u7aef (<code>hasVisibleWindow: false<\/code>)\uff0c\u8a72\u8edf\u9ad4\u4ee5 <code>NT AUTHORITY\\SYSTEM<\/code> \u8eab\u5206\u4f7f\u7528 <code>SetWindowsHookEx (WH_KEYBOARD_LL)<\/code>\u3002\u7531\u65bc\u9019\u6703\u5f9e\u96b1\u85cf\u7684\u74b0\u5883\u4e2d\u5168\u57df\u64f7\u53d6\u539f\u59cb\u6309\u9375\u8f38\u5165\uff0c\u73fe\u4ee3 EDR \u5e73\u53f0\u6703\u6b63\u78ba\u5730\u5c07\u5176\u8b58\u5225\u70ba\u4f4e\u968e\u9375\u76e4\u5074\u9304\u7a0b\u5f0f\u3002\u9019\u4e26\u975e\u8aa4\u5831\uff0c\u800c\u662f\u6e96\u78ba\u5075\u6e2c\u5230\u5408\u6cd5\u5de5\u5177\u6b63\u88ab\u4e3b\u52d5\u6b66\u5668\u5316\u3002<\/p><h3>\u8a18\u61b6\u9ad4\u9451\u8b58\u8207\u8655\u7406\u7a0b\u5e8f\u6a39\u5206\u6790<\/h3><p>\u91cd\u5efa\u96f6\u865f\u75c5\u4eba\u4e0a\u7684\u8a18\u61b6\u9ad4\u507d\u5f71\uff0c\u95e1\u660e\u4e86\u653b\u64ca\u8005\u5be6\u73fe\u96b1\u853d\u6027\u7684\u65b9\u6cd5\uff1a<\/p><ul><li><strong>Session 0 \u57f7\u884c\uff1a<\/strong> Backstage Shell \u7531\u4ee3\u7406\u7a0b\u5f0f\u670d\u52d9\u76f4\u63a5\u5728\u975e\u4e92\u52d5\u5f0f\u7684 Session 0 \u74b0\u5883\u4e2d\u884d\u751f\u3002<\/li><li><strong>\u96b1\u85cf\u684c\u9762\uff1a<\/strong> \u5728\u6c92\u6709\u53ef\u898b\u8996\u7a97\u7684\u60c5\u6cc1\u4e0b\u904b\u4f5c\uff0c\u4f7f\u653b\u64ca\u8005\u80fd\u5b8c\u5168\u5728\u4e0d\u88ab\u672c\u6a5f\u4f7f\u7528\u8005\u5bdf\u89ba\u7684\u60c5\u6cc1\u4e0b\u57f7\u884c\u4e92\u52d5\u5f0f\u547d\u4ee4\u5217\u5de5\u4f5c\u968e\u6bb5 (CMD\/PowerShell)\u3002<\/li><li><strong>LSASS \u63a2\u6e2c\uff1a<\/strong> \u8a18\u61b6\u9ad4\u9451\u8b58\u986f\u793a\uff0c\u5728\u521d\u59cb\u5316\u671f\u9593\uff0cBackstage Shell \u8acb\u6c42\u4e86 <code>lsass.exe<\/code> \u8207 <code>lsaiso.exe<\/code> \u7684\u8655\u7406\u7a0b\u5e8f\u63a7\u5236\u4ee3\u78bc (<code>OpenProcess<\/code>)\uff0c\u5f9e\u800c\u89f8\u767c\u4e86\u9ad8\u4fdd\u771f\u5ea6\u7684\u6191\u8b49\u5b58\u53d6\u8b66\u5831\u3002<\/li><\/ul><h2>\u5165\u4fb5\u6307\u6a19 (IoC)<\/h2><p>\u8abf\u67e5\u671f\u9593\u767c\u73fe\u7684\u5bc6\u78bc\u96dc\u6e4a\u3001\u5de5\u5177\u8207\u507d\u5f71\u8a73\u5217\u5982\u4e0b\uff1a<\/p><table><thead><tr><th>\u4e8c\u9032\u4f4d\u6a94 \/ \u5de5\u5177\u540d\u7a31<\/th><th>SHA256 \u96dc\u6e4a<\/th><th>\u7c3d\u7ae0\u72c0\u614b<\/th><th>\u63cf\u8ff0<\/th><\/tr><\/thead><tbody><tr><td>Akira \u52d2\u7d22\u8edf\u9ad4\u6709\u6548\u8ca0\u8f09<\/td><td><code>bd10283d8c96e8640b37ad688d63f35107f5dc90443ad9dcc5d53c146a49c533<\/code><\/td><td>\u672a\u7c3d\u7f72 \/ \u60e1\u610f<\/td><td>\u900f\u904e SMB \u90e8\u7f72\u7684\u4e3b\u8981 Akira \u52a0\u5bc6\u57f7\u884c\u6a94\u3002<\/td><\/tr><tr><td>ApnStub.exe<\/td><td><code>1f1a74c990abd0c4169a7e3e13f1563f5c4b1edd7abf305cbba515544197847b<\/code><\/td><td>\u5df2\u7c3d\u7f72 (ASK.COM)<\/td><td>\u7528\u65bc\u521d\u59cb\u5165\u4fb5\u7684\u5ee3\u544a\u8edf\u9ad4\u5b58\u6839\u3002<\/td><\/tr><tr><td>ipscan24.exe<\/td><td><code>4179e299c24a130f3c567ddbbfe1835064a3497e8c2a1971aaba597794e8c14d<\/code><\/td><td>\u672a\u7c3d\u7f72 \/ \u99ed\u5ba2\u5de5\u5177<\/td><td>\u7528\u65bc\u5b50\u7db2\u8def\u63a2\u7d22\u7684\u53ef\u651c\u5f0f\u7db2\u8def\u6383\u63cf\u5668\u3002<\/td><\/tr><tr><td>advanced_ip_scanner.exe<\/td><td><code>bcad517cb5f49dcd28e60f6e70abf7e5f60104b78eac672da10de5a063ac1174<\/code><\/td><td>\u5169\u7528\u5de5\u5177<\/td><td>\u5728\u5075\u5bdf\u671f\u9593\u90e8\u7f72\u7684\u6b21\u8981\u7db2\u8def\u6383\u63cf\u5668\u3002<\/td><\/tr><tr><td>Syskey \u64f7\u53d6\u516c\u7528\u7a0b\u5f0f<\/td><td><code>43fc3019e826a9ea0601a65126e48a31d12ade9313521c7ec137daa88f1d77d8<\/code><\/td><td>\u60e1\u610f\u516c\u7528\u7a0b\u5f0f<\/td><td>\u7528\u65bc\u5f9e LSA \u6a5f\u5bc6\u4e2d\u7d44\u5408\u555f\u52d5\u91d1\u9470\u7684\u81ea\u8a02\u4e8c\u9032\u4f4d\u6a94\u3002<\/td><\/tr><tr><td>host-isolation.dll<\/td><td>\u7121 (\u672a\u7c3d\u7f72 DLL)<\/td><td>\u672a\u7c3d\u7f72 \/ \u6ce8\u5165\u7684 DLL<\/td><td>\u65c1\u8f09\u5165\u81f3\u4ee3\u7406\u7a0b\u5f0f\u8655\u7406\u7a0b\u5e8f\u7a7a\u9593\u7684\u672a\u7c3d\u7f72 DLL\u3002<\/td><\/tr><\/tbody><\/table><h2>\u7e3d\u7d50\u56de\u9867<\/h2><p>\u672c\u4e8b\u4ef6\u56de\u61c9\u5206\u6790\u91cd\u9ede\u4ecb\u7d39\u4e86\u5feb\u901f\u79fb\u52d5\u7684 Akira \u52d2\u7d22\u8edf\u9ad4\u90e8\u7f72\u7684\u6a5f\u5236\u3002\u5728\u7531\u5e36\u6709\u7c3d\u7ae0\u7684\u5ee3\u544a\u8edf\u9ad4\u4e0b\u8f09\u5668\u89f8\u767c\u5f8c\uff0c\u653b\u64ca\u8005\u5229\u7528\u672a\u53d7\u7ba1\u7684\u88dd\u7f6e\u5c0d\u7db2\u57df\u63a7\u5236\u7ad9\u57f7\u884c LSA \u67e5\u8a62\uff0c\u6709\u6548\u64f7\u53d6 Syskey \u4ee5\u53d6\u5f97\u7db2\u57df\u7ba1\u7406\u54e1\u6b0a\u9650\u3002\u70ba\u4e86\u78ba\u4fdd\u6df1\u5ea6\u7684\u6301\u7e8c\u6027\uff0c\u5a01\u8105\u884c\u70ba\u8005\u6b66\u5668\u5316\u4e86\u73fe\u6709 RMM \u5de5\u5177\u7684 Backstage Shell\uff0c\u5229\u7528\u5168\u57df Windows \u639b\u9264\u9ed8\u9ed8\u5730\u5f9e Session 0 \u8a18\u9304\u6d3b\u52d5\u3002<\/p><h2>\u53c3\u8003\u8cc7\u6599\u8207\u9032\u968e\u95b1\u8b80<\/h2><ul><li><strong>Akira \u52d2\u7d22\u8edf\u9ad4\uff1a<\/strong> CISA \u7db2\u8def\u5b89\u5168\u5efa\u8b70 (AA24-109A) &#8211; \u6230\u8853\u3001\u6280\u8853\u8207\u7a0b\u5e8f\u3002<\/li><li><strong>SentinelOne\uff1a<\/strong> \u95dc\u65bc\u5fa9\u539f\u8207 VSS \u9084\u539f\u6a5f\u5236\u7684\u6280\u8853\u7c21\u5831\u3002<\/li><li><strong>Microsoft \u6280\u8853\u6587\u4ef6\uff1a<\/strong> Active Directory \u6a39\u7cfb\u5fa9\u539f (krbtgt \u91cd\u8a2d)\u3001LSA \u6a5f\u5bc6\u8207 Syskey \u7d50\u69cb\uff0c\u4ee5\u53ca SetWindowsHookExW API \u52d5\u614b\u3002<\/li><li><strong>Guardz \u5e73\u53f0\uff1a<\/strong> AI \u539f\u751f\u5b89\u5168\u5e73\u53f0\u8207 24\/7 MDR \u67b6\u69cb\u6982\u8ff0\u3002<\/li><li><strong>Guardz \u7814\u7a76\uff1a<\/strong> \u5b89\u5168\u7814\u7a76\u5be6\u9a57\u5ba4 (GitHub) \u4ee5\u53ca\u6db5\u84cb\u91dd\u5c0d SMB \u8207 MSP \u5a01\u8105\u7684\u7db2\u8def\u7814\u7a76\u90e8\u843d\u683c\u3002<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-86d84e0 elementor-widget elementor-widget-button\" data-id=\"86d84e0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/guardz.com\/distributors\/v2\/?utm_source=web&#038;utm_medium=v2sg&#038;utm_campaign=guardz&#038;utm_content=trial\" target=\"_blank\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Start Free Trial<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1a1b0f4 elementor-widget elementor-widget-shortcode\" data-id=\"1a1b0f4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"shortcode.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-shortcode\">\t\t<div data-elementor-type=\"page\" data-elementor-id=\"97146\" class=\"elementor elementor-97146\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-6b25dc0d elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"6b25dc0d\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:0,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-3cc1b37d\" data-id=\"3cc1b37d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-48987d9 elementor-widget elementor-widget-image-box\" data-id=\"48987d9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">\u95dc\u65bc Guardz<\/h3><p class=\"elementor-image-box-description\">Guardz \u70ba\u7ba1\u7406\u670d\u52d9\u63d0\u4f9b\u5546 (MSP) \u548c IT \u5c08\u696d\u4eba\u58eb\u63d0\u4f9b\u4e00\u500b\u4eba\u5de5\u667a\u80fd\u9a45\u52d5\u7684\u7db2\u7d61\u5b89\u5168\u5e73\u53f0\uff0c\u5c08\u9580\u8a2d\u8a08\u4f86\u4fdd\u8b77\u5c0f\u578b\u4f01\u696d\u514d\u53d7\u7db2\u7d61\u653b\u64ca\u3002\u6211\u5011\u7684\u7d71\u4e00\u6aa2\u6e2c\u8207\u97ff\u61c9\u5e73\u53f0\u80fd\u5920\u5168\u9762\u4fdd\u8b77\u7528\u6236\u3001\u96fb\u5b50\u90f5\u4ef6\u3001\u8a2d\u5099\u3001\u96f2\u7aef\u76ee\u9304\u548c\u6578\u64da\u3002\u900f\u904e\u7c21\u5316\u7db2\u7d61\u5b89\u5168\u7ba1\u7406\uff0c\u6211\u5011\u8b93\u4f01\u696d\u80fd\u5920\u5c08\u6ce8\u65bc\u767c\u5c55\u696d\u52d9\uff0c\u540c\u6642\u6e1b\u5c11\u5b89\u5168\u7ba1\u7406\u7684\u8907\u96dc\u6027\u3002Guardz \u7d50\u5408\u5f37\u5927\u7684\u7db2\u7d61\u5b89\u5168\u6280\u8853\u548c\u8c50\u5bcc\u7684\u5c08\u696d\u77e5\u8b58\uff0c\u78ba\u4fdd\u5b89\u5168\u63aa\u65bd\u6301\u7e8c\u53d7\u5230\u76e3\u63a7\u3001\u7ba1\u7406\u548c\u6539\u9032\uff0c\u9810\u9632\u672a\u4f86\u7684\u653b\u64ca\u4e26\u964d\u4f4e\u98a8\u96aa\u3002<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\n\t\t<div data-elementor-type=\"page\" data-elementor-id=\"18152\" class=\"elementor elementor-18152\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-748947f elementor-section-full_width elementor-section-height-default elementor-section-height-default\" data-id=\"748947f\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;jet_parallax_layout_list&quot;:[{&quot;jet_parallax_layout_image&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;_id&quot;:&quot;c4f773e&quot;,&quot;jet_parallax_layout_image_tablet&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_image_mobile&quot;:{&quot;url&quot;:&quot;&quot;,&quot;id&quot;:&quot;&quot;,&quot;size&quot;:&quot;&quot;},&quot;jet_parallax_layout_speed&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:50,&quot;sizes&quot;:[]},&quot;jet_parallax_layout_type&quot;:&quot;scroll&quot;,&quot;jet_parallax_layout_direction&quot;:&quot;1&quot;,&quot;jet_parallax_layout_fx_direction&quot;:null,&quot;jet_parallax_layout_z_index&quot;:0,&quot;jet_parallax_layout_bg_x&quot;:50,&quot;jet_parallax_layout_bg_x_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_x_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y&quot;:50,&quot;jet_parallax_layout_bg_y_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_y_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size&quot;:&quot;auto&quot;,&quot;jet_parallax_layout_bg_size_tablet&quot;:&quot;&quot;,&quot;jet_parallax_layout_bg_size_mobile&quot;:&quot;&quot;,&quot;jet_parallax_layout_animation_prop&quot;:&quot;transform&quot;,&quot;jet_parallax_layout_on&quot;:[&quot;desktop&quot;,&quot;tablet&quot;]}]}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-7995c19\" data-id=\"7995c19\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b63d6ea elementor-widget elementor-widget-image-box\" data-id=\"b63d6ea\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image-box.default\">\n\t\t\t\t\t<div class=\"elementor-image-box-wrapper\"><div class=\"elementor-image-box-content\"><h3 class=\"elementor-image-box-title\">\u95dc\u65bcVersion 2<\/h3><p class=\"elementor-image-box-description\">Version 2 Digital \u662f\u7acb\u8db3\u4e9e\u6d32\u7684\u589e\u503c\u4ee3\u7406\u5546\u53caIT\u958b\u767c\u8005\u3002\u516c\u53f8\u5728\u7db2\u7d61\u5b89\u5168\u3001\u96f2\u7aef\u3001\u6578\u64da\u4fdd\u8b77\u3001\u7d42\u7aef\u8a2d\u5099\u3001\u57fa\u790e\u8a2d\u65bd\u3001\u7cfb\u7d71\u76e3\u63a7\u3001\u5b58\u5132\u3001\u7db2\u7d61\u7ba1\u7406\u3001\u5546\u696d\u751f\u7522\u529b\u548c\u901a\u4fe1\u7522\u54c1\u7b49\u5404\u500b\u9818\u57df\u4ee3\u7406\u767c\u5c55\u5404\u7a2e IT \u7522\u54c1\u3002\u900f\u904e\u516c\u53f8\u9f90\u5927\u7684\u7db2\u7d61\u3001\u901a\u8def\u3001\u92b7\u552e\u9ede\u3001\u5206\u92b7\u5546\u53ca\u5408\u4f5c\u5925\u4f34\uff0cVersion 2 \u63d0\u4f9b\u5ee3\u88ab\u5e02\u5834\u8b9a\u8cde\u7684\u7522\u54c1\u53ca\u670d\u52d9\u3002Version 2 \u7684\u92b7\u552e\u7db2\u7d61\u5305\u62ec\u53f0\u7063\u3001\u9999\u6e2f\u3001\u6fb3\u9580\u3001\u4e2d\u570b\u5927\u9678\u3001\u65b0\u52a0\u5761\u3001\u99ac\u4f86\u897f\u4e9e\u7b49\u5404\u4e9e\u592a\u5730\u5340\uff0c\u5ba2\u6236\u4f86\u81ea\u5404\u884c\u5404\u696d\uff0c\u5305\u62ec\u5168\u7403 1000 \u5927\u8de8\u570b\u4f01\u696d\u3001\u4e0a\u5e02\u516c\u53f8\u3001\u516c\u7528\u4e8b\u696d\u3001\u91ab\u7642\u3001\u91d1\u878d\u3001\u6559\u80b2\u6a5f\u69cb\u3001\u653f\u5e9c\u90e8\u9580\u3001\u7121\u6578\u6210\u529f\u7684\u4e2d\u5c0f\u4f01\u53ca\u4f86\u81ea\u4e9e\u6d32\u5404\u57ce\u5e02\u7684\u6d88\u8cbb\u5e02\u5834\u5ba2\u6236\u3002<\/p><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>\u6f0f\u6d1e\u5256\u6790\uff1a\u63ed\u9732\u5f71\u5b50 RMM \u4e2d\u7684 Backstage Shell \u5118\u7ba1\u4eba\u5de5\u667a\u6167\u6301\u7e8c\u4f54\u64da\u7db2\u8def\u5b89\u5168\u51fa\u7248\u7269\u8207\u6703\u8b70\u8b70\u7a0b [&hellip;]<\/p>\n","protected":false},"author":149011790,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":true},"categories":[1276,1342,61],"tags":[1277,1341],"class_list":["post-135927","post","type-post","status-publish","format-standard","hentry","category-guardz","category-year2026","category-press-release","tag-guardz","tag-1341"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76 - Version 2<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/version-2.com\/zh\/2026\/10\/\u5e55\u5f8c\u771f\u76f8\uff1armm\u6feb\u7528\u6848\u4f8b\u7814\u7a76\/\" \/>\n<meta property=\"og:locale\" content=\"zh_HK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76 - Version 2\" \/>\n<meta property=\"og:description\" content=\"\u6f0f\u6d1e\u5256\u6790\uff1a\u63ed\u9732\u5f71\u5b50 RMM \u4e2d\u7684 Backstage Shell \u5118\u7ba1\u4eba\u5de5\u667a\u6167\u6301\u7e8c\u4f54\u64da\u7db2\u8def\u5b89\u5168\u51fa\u7248\u7269\u8207\u6703\u8b70\u8b70\u7a0b [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/version-2.com\/zh\/2026\/10\/\u5e55\u5f8c\u771f\u76f8\uff1armm\u6feb\u7528\u6848\u4f8b\u7814\u7a76\/\" \/>\n<meta property=\"og:site_name\" content=\"Version 2\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-15T02:59:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-15T03:05:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg\" \/>\n<meta name=\"author\" content=\"tracylamv2\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"tracylamv2\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9810\u8a08\u95b1\u8b80\u6642\u9593\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 \u5206\u9418\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/\"},\"author\":{\"name\":\"tracylamv2\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/011bc7c3731c930bcfeecd52fefb6365\"},\"headline\":\"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76\",\"datePublished\":\"2026-10-15T02:59:50+00:00\",\"dateModified\":\"2026-10-15T03:05:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/\"},\"wordCount\":196,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/guardz.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/feature_image_backstage_intrusion.svg\",\"keywords\":[\"Guardz\",\"2026\"],\"articleSection\":[\"Guardz\",\"2026\",\"Press Release\"],\"inLanguage\":\"zh-HK\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/\",\"url\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/\",\"name\":\"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76 - Version 2\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/guardz.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/feature_image_backstage_intrusion.svg\",\"datePublished\":\"2026-10-15T02:59:50+00:00\",\"dateModified\":\"2026-10-15T03:05:46+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#breadcrumb\"},\"inLanguage\":\"zh-HK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#primaryimage\",\"url\":\"https:\\\/\\\/guardz.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/feature_image_backstage_intrusion.svg\",\"contentUrl\":\"https:\\\/\\\/guardz.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/feature_image_backstage_intrusion.svg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/version-2.com\\\/2026\\\/10\\\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9801\",\"item\":\"https:\\\/\\\/version-2.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"name\":\"Version 2\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/version-2.com\\\/zh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-HK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#organization\",\"name\":\"Version 2\",\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/version-2.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1\",\"width\":1795,\"height\":335,\"caption\":\"Version 2\"},\"image\":{\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/version-2.com\\\/zh\\\/#\\\/schema\\\/person\\\/011bc7c3731c930bcfeecd52fefb6365\",\"name\":\"tracylamv2\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-HK\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g\",\"caption\":\"tracylamv2\"},\"url\":\"https:\\\/\\\/version-2.com\\\/zh\\\/author\\\/tracylamv2\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76 - Version 2","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/version-2.com\/zh\/2026\/10\/\u5e55\u5f8c\u771f\u76f8\uff1armm\u6feb\u7528\u6848\u4f8b\u7814\u7a76\/","og_locale":"zh_HK","og_type":"article","og_title":"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76 - Version 2","og_description":"\u6f0f\u6d1e\u5256\u6790\uff1a\u63ed\u9732\u5f71\u5b50 RMM \u4e2d\u7684 Backstage Shell \u5118\u7ba1\u4eba\u5de5\u667a\u6167\u6301\u7e8c\u4f54\u64da\u7db2\u8def\u5b89\u5168\u51fa\u7248\u7269\u8207\u6703\u8b70\u8b70\u7a0b [&hellip;]","og_url":"https:\/\/version-2.com\/zh\/2026\/10\/\u5e55\u5f8c\u771f\u76f8\uff1armm\u6feb\u7528\u6848\u4f8b\u7814\u7a76\/","og_site_name":"Version 2","article_published_time":"2026-10-15T02:59:50+00:00","article_modified_time":"2026-10-15T03:05:46+00:00","og_image":[{"url":"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg","type":"","width":"","height":""}],"author":"tracylamv2","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"tracylamv2","\u9810\u8a08\u95b1\u8b80\u6642\u9593":"3 \u5206\u9418"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#article","isPartOf":{"@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/"},"author":{"name":"tracylamv2","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/011bc7c3731c930bcfeecd52fefb6365"},"headline":"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76","datePublished":"2026-10-15T02:59:50+00:00","dateModified":"2026-10-15T03:05:46+00:00","mainEntityOfPage":{"@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/"},"wordCount":196,"commentCount":0,"publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"image":{"@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#primaryimage"},"thumbnailUrl":"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg","keywords":["Guardz","2026"],"articleSection":["Guardz","2026","Press Release"],"inLanguage":"zh-HK","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/","url":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/","name":"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76 - Version 2","isPartOf":{"@id":"https:\/\/version-2.com\/zh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#primaryimage"},"image":{"@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#primaryimage"},"thumbnailUrl":"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg","datePublished":"2026-10-15T02:59:50+00:00","dateModified":"2026-10-15T03:05:46+00:00","breadcrumb":{"@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#breadcrumb"},"inLanguage":"zh-HK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/"]}]},{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#primaryimage","url":"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg","contentUrl":"https:\/\/guardz.com\/wp-content\/uploads\/2026\/10\/feature_image_backstage_intrusion.svg"},{"@type":"BreadcrumbList","@id":"https:\/\/version-2.com\/2026\/10\/%e5%b9%95%e5%be%8c%e7%9c%9f%e7%9b%b8%ef%bc%9armm%e6%bf%ab%e7%94%a8%e6%a1%88%e4%be%8b%e7%a0%94%e7%a9%b6\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9801","item":"https:\/\/version-2.com\/"},{"@type":"ListItem","position":2,"name":"\u5e55\u5f8c\u771f\u76f8\uff1aRMM\u6feb\u7528\u6848\u4f8b\u7814\u7a76"}]},{"@type":"WebSite","@id":"https:\/\/version-2.com\/zh\/#website","url":"https:\/\/version-2.com\/zh\/","name":"Version 2","description":"","publisher":{"@id":"https:\/\/version-2.com\/zh\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/version-2.com\/zh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-HK"},{"@type":"Organization","@id":"https:\/\/version-2.com\/zh\/#organization","name":"Version 2","url":"https:\/\/version-2.com\/zh\/","logo":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","contentUrl":"https:\/\/i0.wp.com\/version-2.com\/wp-content\/uploads\/2020\/08\/v2-hk-hor-4.png?fit=1795%2C335&ssl=1","width":1795,"height":335,"caption":"Version 2"},"image":{"@id":"https:\/\/version-2.com\/zh\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/version-2.com\/zh\/#\/schema\/person\/011bc7c3731c930bcfeecd52fefb6365","name":"tracylamv2","image":{"@type":"ImageObject","inLanguage":"zh-HK","@id":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9d01d79cbfd8b2e878f5d701a362cc9fca466d33fec977b59706c23c1a2db15c?s=96&d=identicon&r=g","caption":"tracylamv2"},"url":"https:\/\/version-2.com\/zh\/author\/tracylamv2\/"}]}},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pbQRKm-zmn","jetpack_featured_media_url":"","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/135927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/users\/149011790"}],"replies":[{"embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/comments?post=135927"}],"version-history":[{"count":9,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/135927\/revisions"}],"predecessor-version":[{"id":135936,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/posts\/135927\/revisions\/135936"}],"wp:attachment":[{"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/media?parent=135927"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/categories?post=135927"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/version-2.com\/zh\/wp-json\/wp\/v2\/tags?post=135927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}