wp salts compromised WordPress siasatan lanjutan: Panduan Premium Incident Response WordPress
wp salts compromised WordPress siasatan lanjutan ialah panduan premium WordPress incident response untuk siasatan lanjutan, fokus persistence hunting, customer verification, cache analysis, credential control dan monitoring.
1. Define symptom
Catat apa visitor/customer/search engine nampak.
2. Preserve evidence
Capture screenshot, URL, timestamp, file path, user changes dan logs.
3. Review EasyTools
EasyTools Antivirus & Security bantu malware/integrity review bersama cache, database dan account checks.
4. Separate live vs residue
Bezakan active malware dengan search/CDN/object/browser cache.
5. Investigate source
Cari source sebenar dan persistence path.
6. Check conditional behavior
Compare logged-in/logged-out, mobile/desktop dan search referrer.
7. Review files
Check theme, plugin, uploads, wp-config, .htaccess dan unfamiliar code.
8. Review database
Check options, posts, widgets, users, transients dan scheduled data.
9. Review cache
Inspect page cache, object cache dan CDN.
10. Review accounts
Check admin, email change, reset password, session dan role changes.
11. Review credentials
Assess FTP/SFTP, hosting, SMTP, API, deployment dan DB credentials.
12. Avoid mistake
Changing salts logs users out.
13. Contain safely
Disable compromised component dengan recovery path.
14. Recover trusted source
Replace code dengan clean trusted copies.
15. Rotate secrets
Invalidate sessions, password, API tokens dan keys.
16. Validate journey
Test login, forms, checkout, referral, mobile dan affected URLs.
17. Validate search/cache
Regenerate sitemap dan purge cache selepas origin clean.
18. Repeat review
Run malware/integrity review semula.
19. Monitor recurrence
Watch files, admin, database options, cron dan redirects.
20. Close incident
Document root cause, scope, remediation dan monitoring.
21. EasyTools security path
Antivirus & Security · Articles · Online Tools.
Soalan & Jawapan
Apa perlu capture sebelum cleanup?
Catat affected URL, screenshot, file path, account change, timestamp dan relevant logs.
Macam mana tahu compromise masih aktif?
Compare current behavior, file/database changes dan account activity dengan cache atau historical evidence.
EasyTools Antivirus boleh bantu?
EasyTools Antivirus & Security membantu malware dan integrity review semasa investigation.
Apa kesilapan terbesar?
Changing salts logs users out.
Persistence point apa perlu check?
Review cron, mu-plugin, uploads, active theme, wp-config, .htaccess, database options, cache dan privileged users.
Perlu purge cache terus?
Hanya selepas underlying source dikenal pasti atau dibuang.
Credential mana perlu rotate?
WordPress admin, hosting, database, FTP/SFTP, SMTP, API token dan deployment secrets ikut scope.
Bagaimana verify recovery?
Test anonymous, mobile, search referral, login, forms, checkout jika relevant dan affected URLs.
Berapa lama perlu monitor?
Cukup lama untuk cover scheduled tasks dan normal traffic patterns.
Bila perlu specialist?
Jika data exposure possible, privileged access compromised, reinfection berulang atau scope tak jelas.