[{"data":1,"prerenderedAt":1693},["ShallowReactive",2],{"sc:header-data-ko":3,"sc:footer-data-ko":489,"post-ko--posts-2026-01-27-exchange-active-directory-150f55880e8d67":519,"authors_data":1105,"content-ko-list-7b291c2dd91a4":1460,"authors_data:​Thorsten Kunzi​":1691},{"lang":4,"home":5,"navigation":17,"meta":479,"contact":485},"de",{"name":6,"folderSwitch":7,"imgLight":10,"img":11,"languages":12},"home",[8,9],"authors","blog","/logos/gk-Logo-sw.svg","/logos/gk-Logo-rgb.svg",{"ko":13},{"title":14,"url":15,"alt":16},"홈","/ko","glueckkanja Logo",[18,127,231,316,395,402],{"name":19,"languages":20,"children":24},"workplace",{"ko":21},{"title":22,"description":23},"Workplace","스마트하고 안전하며 유연한 워크스페이스를 위한 Microsoft 365 기반 솔루션으로, 최신 기술과 ID 서비스를 매끄럽게 통합합니다.",[25,55,91],{"name":26,"languages":27,"children":30},"portfolio",{"ko":28},{"title":29},"Portfolio",[31,37,43,49],{"name":32,"languages":33},"managed-intune",{"ko":34},{"title":35,"url":36},"Managed Intune","/ko/entra-intune/managed-intune",{"name":38,"languages":39},"managed-entra",{"ko":40},{"title":41,"url":42},"Managed Entra","/ko/entra-intune/managed-entra",{"name":44,"languages":45},"managed-workplace",{"ko":46},{"title":47,"url":48},"Managed Workplace","/ko/workplace/managed-workplace",{"name":50,"languages":51},"consulting-services",{"ko":52},{"title":53,"url":54},"Consulting Services","/ko/workplace/consulting-services",{"name":56,"languages":57,"children":60},"microsoft-365-endpoint",{"ko":58},{"title":59},"Microsoft 365 Endpoint",[61,67,73,79,85],{"name":62,"languages":63},"microsoft-entra-suite",{"ko":64},{"title":65,"url":66},"Microsoft Entra Suite","/ko/workplace/microsoft-entra-suite",{"name":68,"languages":69},"microsoft-intune",{"ko":70},{"title":71,"url":72},"Microsoft Intune","/ko/workplace/microsoft-intune",{"name":74,"languages":75},"microsoft-windows",{"ko":76},{"title":77,"url":78},"Microsoft Windows","/ko/workplace/microsoft-windows",{"name":80,"languages":81},"windows-365-cloud-pc",{"ko":82},{"title":83,"url":84},"Windows 365 Cloud PC","/ko/workplace/windows365-cloud-pc",{"name":86,"languages":87},"cloud-workplace-foundation",{"ko":88},{"title":89,"url":90},"Cloud Workplace Foundation","/ko/workplace/cloud-workplace-foundation",{"name":92,"languages":93,"children":96},"microsoft-365-collaboration",{"ko":94},{"title":95},"Microsoft 365 Collaboration",[97,103,109,115,121],{"name":98,"languages":99},"microsoft-copilot",{"ko":100},{"title":101,"url":102},"Microsoft 365 Copilot","/ko/workplace/microsoft-365-copilot",{"name":104,"languages":105},"microsoft-teams",{"ko":106},{"title":107,"url":108},"Teams","/ko/workplace/microsoft-teams",{"name":110,"languages":111},"sharepoint-powerplatform",{"ko":112},{"title":113,"url":114},"SharePoint & Power Platform","/ko/workplace/sharepoint-power-platform",{"name":116,"languages":117},"exchange-online",{"ko":118},{"title":119,"url":120},"Exchange Online","/ko/workplace/exchange-online",{"name":122,"languages":123},"information-protection-compliance",{"ko":124},{"title":125,"url":126},"Information Protection & Compliance","/ko/workplace/information-protection-compliance",{"name":128,"languages":129,"children":133},"azure",{"ko":130},{"title":131,"description":132},"Azure","Azure로 성장을 가속하세요: IaaS와 PaaS를 통해 클라우드 비용을 절감하고 효율을 높이며 혁신을 추진합니다.",[134,151,181],{"name":135,"languages":136,"children":138},"azure-portfolio",{"ko":137},{"title":29},[139,145],{"name":140,"languages":141},"azure-managed-services",{"ko":142},{"title":143,"url":144},"Azure Managed Services","/ko/azure/azure-managed-services",{"name":146,"languages":147},"azure-consulting",{"ko":148},{"title":149,"url":150},"Azure Consulting","/ko/azure/azure-consulting",{"name":152,"languages":153,"children":156},"azure-scenarios",{"ko":154},{"title":155},"시나리오",[157,163,169,175],{"name":158,"languages":159},"plan-your-cloud",{"ko":160},{"title":161,"url":162},"클라우드 계획","/ko/azure/plan-your-cloud",{"name":164,"languages":165},"migrate-to-the-cloud",{"ko":166},{"title":167,"url":168},"클라우드로 마이그레이션","/ko/azure/migrate-to-the-cloud",{"name":170,"languages":171},"innovate-your-business",{"ko":172},{"title":173,"url":174},"비즈니스 혁신","/ko/azure/innovate-your-business",{"name":176,"languages":177},"vmware-exit",{"ko":178},{"title":179,"url":180},"VMware 전략 재검토","/ko/azure/vmware-exit",{"name":182,"languages":183,"children":186},"azure-practices",{"ko":184},{"title":185},"Practices",[187,193,199,202,208,213,219,225],{"name":188,"languages":189},"azure-foundation",{"ko":190},{"title":191,"url":192},"Azure Foundation","/ko/azure/azure-foundation",{"name":194,"languages":195},"azure-ai-foundation",{"ko":196},{"title":197,"url":198},"Azure AI Foundation","/ko/azure/azure-ai-foundation",{"name":86,"languages":200},{"ko":201},{"title":89,"url":90},{"name":203,"languages":204},"azure-data-foundation",{"ko":205},{"title":206,"url":207},"Azure Data Foundation","/ko/azure/azure-data-foundation",{"name":188,"languages":209},{"ko":210},{"title":211,"url":212},"Azure Container Foundation","/ko/azure/azure-container-foundation",{"name":214,"languages":215},"dark-tenant",{"ko":216},{"title":217,"url":218},"Managed Dark Tenant","/ko/azure/managed-dark-tenant",{"name":220,"languages":221},"azure-cloud-adoption-framework",{"ko":222},{"title":223,"url":224},"Cloud Adoption Framework","/ko/azure/cloud-adoption-framework",{"name":226,"languages":227},"azure-cloud-competence-center",{"ko":228},{"title":229,"url":230},"Cloud Competence Center","/ko/azure/cloud-competence-center",{"name":232,"languages":233,"children":242},"security",{"ko":234},{"title":235,"description":236,"emergency":237},"보안","수상 경력의 24/7 매니지드 서비스, 인시던트 대응, 최신 인프라 보호로 클라우드를 지킵니다.",{"text":238,"href":239,"skin":240,"icon":241},"공격을 받고 있나요?","/ko/security/are-you-under-attack","primary","emergency",[243,268,289],{"name":244,"children":245},"security-security-consulting",[246,252,256,262],{"name":247,"languages":248},"managed-red-tenant",{"ko":249},{"title":250,"url":251},"Managed Red Tenant","/ko/security/managed-red-tenant",{"name":214,"languages":253},{"ko":254},{"title":255,"url":218},"Dark Tenant",{"name":257,"languages":258},"sentinel-data-lake",{"ko":259},{"title":260,"url":261},"Sentinel Data Lake","/ko/security/sentinel-data-lake",{"name":263,"languages":264},"security-consulting",{"ko":265},{"title":266,"url":267},"Security Consulting","/ko/security/security-consulting",{"name":269,"children":270},"security-cloud-security-operations-center",[271,277,283],{"name":272,"languages":273},"cloud-security-operations-center",{"ko":274},{"title":275,"url":276},"Cloud Security Operations Center","/ko/security/cloud-security-operations-center",{"name":278,"languages":279},"global-secure-access",{"ko":280},{"title":281,"url":282},"Global Secure Access","/ko/security/global-secure-access",{"name":284,"languages":285},"my-work-id",{"ko":286},{"title":287,"url":288},"MyWorkID","/ko/security/my-work-id",{"name":290,"children":291},"security-preventive-services",[292,298,304,310],{"name":293,"languages":294},"preventive-services",{"ko":295},{"title":296,"url":297},"Preventive Services","/ko/security/preventive-services",{"name":299,"languages":300},"data-security-services",{"ko":301},{"title":302,"url":303},"Data Security Service","/ko/security/data-security-service",{"name":305,"languages":306},"security-copilot-agents",{"ko":307},{"title":308,"url":309},"Security Copilot Agents","/ko/security/security-copilot-agents",{"name":311,"languages":312},"nis2",{"ko":313},{"title":314,"url":315},"NIS2 이행","/ko/security/red-dark-tenant-nis2",{"name":317,"languages":318,"children":322},"products",{"ko":319},{"title":320,"description":321},"제품","완전히 안전한 100% 클라우드 네이티브 Microsoft 환경을 위한 혁신적인 제품군으로, 협업과 네트워크 인증, 소프트웨어 관리를 강화합니다.",[323,360],{"name":324,"products":325,"children":326},"lorem ipsum 1",true,[327,336,344,352],{"name":328,"img":329,"target":330,"languages":331},"realmjoin","products/realmjoin/realmjoin-nav-logo.svg","_blank",{"ko":332},{"title":333,"url":334,"subtitle":335},"RealmJoin","https://www.realmjoin.com","클라우드 기반 소프트웨어 배포",{"name":337,"img":338,"target":330,"languages":339},"scepman","products/scepman/scepman-nav-logo.svg",{"ko":340},{"title":341,"url":342,"subtitle":343},"SCEPman","https://www.scepman.com","클라우드에서 인증서 배포",{"name":345,"img":346,"target":330,"languages":347},"konnekt","products/konnekt/konnekt-nav-logo.svg",{"ko":348},{"title":349,"url":350,"subtitle":351},"KONNEKT","https://www.konnekt.io","Office 365 데이터를 로컬에서 활용",{"name":353,"img":354,"target":330,"languages":355},"realmigrator","products/realmigrator/realmigrator-nav-logo.svg",{"ko":356},{"title":357,"url":358,"subtitle":359},"RealMigrator","https://www.realmigrator.com","서버 간 데이터 마이그레이션",{"name":361,"products":325,"children":362},"lorem ipsum 2",[363,371,379,387],{"name":364,"img":365,"target":330,"languages":366},"terraprovider","products/terraprovider/terraprovider-nav-logo.svg",{"ko":367},{"title":368,"url":369,"subtitle":370},"TerraProvider","https://www.terraprovider.com","Microsoft 365용 Terraform Provider",{"name":372,"img":373,"target":330,"languages":374},"radiusaas","products/radius/radius-nav-logo.svg",{"ko":375},{"title":376,"url":377,"subtitle":378},"RADIUSaaS","https://www.radius-as-a-service.com","네트워크 인증",{"name":380,"img":381,"target":330,"languages":382},"unifiedcontacts","products/unified-contacts/unifiedcontact-nav-logo.svg",{"ko":383},{"title":384,"url":385,"subtitle":386},"Unified Contacts","https://www.unified-contacts.com","Microsoft Teams에서 연락처 찾기",{"name":388,"img":389,"target":330,"languages":390},"autopilotmonitor","products/autopilot-monitor/AutopilotMonitor-nav-logo.svg",{"ko":391},{"title":392,"url":393,"subtitle":394},"Autopilot Monitor","https://www.autopilotmonitor.com","실시간 Windows Autopilot 모니터링",{"name":396,"languages":397},"casestudies",{"ko":398},{"title":399,"url":400,"description":401},"고객 사례","/ko/casestudies","클라우드의 선구자: Blueprint 기반 접근 방식과 Infrastructure-as-Code 전문성을 갖춘, 포괄적인 클라우드 솔루션을 위한 최고의 Microsoft 파트너입니다.",{"name":403,"languages":404,"children":407},"company",{"ko":405},{"title":406,"description":401},"회사",[408,438,462],{"name":409,"languages":410,"children":413},"company-about-us",{"ko":411},{"title":412},"회사 소개",[414,420,426,432],{"name":415,"languages":416},"company-facts-figures",{"ko":417},{"title":418,"url":419},"주요 현황","/ko/company/facts-and-figures",{"name":421,"languages":422},"company-contact",{"ko":423},{"title":424,"url":425},"연락처 및 위치","/ko/company/contact-and-locations",{"name":427,"languages":428},"switzerland",{"ko":429},{"title":430,"url":431}," glueckkanja 스위스","/ko/company/switzerland",{"name":433,"languages":434},"austria",{"ko":435},{"title":436,"url":437},"glueckkanja 오스트리아","/ko/company/austria",{"name":439,"languages":440,"children":443},"company-career",{"ko":441},{"title":442},"채용",[444,450,456],{"name":445,"languages":446},"company-career-overview",{"ko":447},{"title":448,"url":449},"채용 안내","/ko/career",{"name":451,"languages":452},"company-young-professionals",{"ko":453},{"title":454,"url":455},"Young Professionals","/ko/young-professionals",{"name":457,"languages":458},"company-jobs",{"ko":459},{"title":460,"url":461},"채용 공고","/ko/job-offers",{"name":463,"languages":464,"children":467},"company-latest",{"ko":465},{"title":466},"최신 소식",[468,474],{"name":469,"languages":470},"company-blog",{"ko":471},{"title":472,"url":473},"블로그","/ko/blog",{"name":469,"languages":475},{"ko":476},{"title":477,"url":478},"이벤트","/ko/events",[480],{"name":481,"languages":482},"career-meta",{"ko":483},{"title":442,"url":449,"active":484},false,{"languages":486},{"ko":487},{"title":488,"url":425,"active":484},"문의",{"data":490},{"bgColor":491,"number":492,"mail":493,"brandLogos":494,"logos":495,"links":499,"linksKo":509},"var(--color-gk-mid-blue)","+49 69 4005520","info@glueckkanja.com",null,[496],{"img":10,"alt":16,"url":497,"class":498},"index.html","max-w-19rem",[500,503,506],{"title":501,"url":502},"Datenschutz","/de/privacy",{"title":504,"url":505},"Impressum","/de/imprint",{"title":507,"url":508},"No Cookies","/de/cookies",[510,513,516],{"title":511,"url":512},"개인정보 처리방침","/ko/privacy",{"title":514,"url":515},"법적 고지","/ko/imprint",{"title":517,"url":518},"쿠키 없음","/ko/cookies",{"id":520,"title":521,"author":522,"body":524,"cta":494,"description":1058,"eventid":494,"extension":1077,"hideInRecent":325,"layout":1078,"meta":1079,"moment":1083,"navigation":325,"path":1101,"seo":1102,"stem":1103,"tags":494,"webcast":484,"__hash__":1104},"content_ko/posts/2026-01-27-exchange-active-directory.md","후회 없이 Exchange AD 분할 권한 적용하기",[523],"​Thorsten Kunzi​",{"type":525,"value":526,"toc":1057},"minimal",[527,532,536,543,547,574,577,581,587,602,608,611,615,651,670,675,681,690,694,710,714,721,725,735,740,745,764,768,793,797,817,825,841,855,915,919,943,960,972,985,992,996,1006,1017,1029,1032,1035,1038,1053],[528,529,531],"h3",{"id":530},"tldr-단점을-제거하면-어떨까요","TLDR: 단점을 제거하면 어떨까요?",[533,534,535],"p",{},"Exchange 사용자, 그룹, 연락처 등이 위치한 곳에서 AD 및 RBAC 권한을 다시 부여하는 방법을 찾았습니다. 이 방식이라면 관리자나 ID 관리 시스템 측에서 별도의 도입 작업이 필요하지 않으며, 제 경험상 이것이 대부분의 기업이 이 모델을 구현하지 못하게 막았던 걸림돌이었습니다. 그러면서도 측면 이동(lateral movement)과 도메인 침해에 대한 보안 이점은 그대로 유지됩니다.",[533,537,538],{},[539,540],"img",{"alt":541,"src":542},"Active Directory","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_1.png",[528,544,546],{"id":545},"세-단계로-구현됩니다","세 단계로 구현됩니다:",[548,549,550,564,569],"ol",{},[551,552,553,560,561],"li",{},[554,555,559],"a",{"href":556,"rel":557},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions#switch-to-active-directory-split-permissions",[558],"nofollow","AD 분할 권한 모델"," 구현",[562,563],"br",{},[551,565,566,567],{},"Exchange 서버에 상실된 AD 권한을 부여하되, 관련 OU에 한해서만 부여",[562,568],{},[551,570,571,572],{},"누락된 PowerShell cmdlet을 다시 활성화하기 위해 Exchange RBAC 부여",[562,573],{},[533,575,576],{},"모두 Microsoft의 가이드, AD ACL 또는 Exchange RBAC 할당을 통해 이루어집니다.",[528,578,580],{"id":579},"지금-왜-신경-써야-할까요","지금 왜 신경 써야 할까요?",[533,582,583,584,586],{},"이 기능은 Exchange 2010 SP1과 함께 도입된 이후로 대체로 간과되거나 무시되어 왔습니다. 그러나 기본 공유 권한 모델은 Active Directory 탈취로 이어지는 큰 보안 위험을 나타냅니다. 최근 몇 년간 Exchange가 원격 익스플로잇으로 악명을 떨쳐온 점까지 더하면, 이제는 행동에 나설 때입니다!",[562,585],{},"\n이 문제는 도메인 루트에 부여된 권한이 도메인 전체로 상속되는 데서 비롯됩니다.",[588,589,590,593,596,599],"ul",{},[551,591,592],{},"사용자 및 그룹에 대한 권한 수정(사실상 전체 액세스)",[551,594,595],{},"그룹 구성원 수정",[551,597,598],{},"사용자 암호 재설정",[551,600,601],{},"사용자 및 그룹 생성/삭제",[533,603,604],{},[539,605],{"alt":606,"src":607},"Permissions","https://res.cloudinary.com/c4a8/image/upload/v1770991330/blog/pics/Blog_-_Exchange_AD_Split_Permissions_-_2.png",[533,609,610],{},"일부 높은 권한을 가진 Tier0 사용자 및 그룹만이 AdminSDHolder 프로세스(admincount=1 특성)에 의해 보호되며, 많은 환경에서는 도메인 및/또는 포리스트의 침해를 허용하거나 최소한 심각한 영향을 초래할 수 있는 보호되지 않은 사용자나 그룹이 존재합니다.",[528,612,614],{"id":613},"대표적인-예시","대표적인 예시:",[588,616,617,620,640],{},[551,618,619],{},"PWHashSync를 사용할 때의 Entra Connect Sync 계정",[551,621,622,623],{},"기본 그룹\n",[588,624,625,628,637],{},[551,626,627],{},"EntraConnect 계정과 함께 있는 Allowed RODC Password Replication Group(실제 Windows RODC가 존재하는 경우)",[551,629,630,631,636],{},"더 많은 경로를 보여주는 ",[554,632,635],{"href":633,"rel":634},"https://specterops.io/blog/2025/06/25/untrustworthy-trust-builders-account-operators-replicating-trust-attack-aorta/",[558],"Untrustworthy Trust Builders: Account Operators Replicating Trust Attack (AORTA) - SpecterOps","도 참고하세요(Account Operators 그룹도 유사한 위협입니다)",[551,638,639],{},"보호를 제거하여 공격 경로를 만들기 위해 Protected Users를 비우는 행위",[551,641,642,643],{},"보호되지 않은 사용자 지정 그룹 또는 관리자/서비스 계정\n",[588,644,645,648],{},[551,646,647],{},"GPO에 대한 쓰기 권한(도메인 컨트롤러에 적용됨)",[551,649,650],{},"AD 백업, 백업 서버, PKI 템플릿, 하이퍼바이저 등에 대한 액세스 관리",[533,652,653,654,656,657,662,664,665],{},"이러한 현재 및 향후의 모든 잠재적 경로를 사후에 통제하기란 매우 어렵습니다. _ADM 사용자 지정 OU의 경우 ACL 상속을 비활성화할 수 있지만, 대부분의 기본 개체는 기본 Builtin OU나 Users 컨테이너에서 이동할 수 없어 취약한 상태로 남습니다.",[562,655],{},"\n루트에서 강력한 권한을 제거하는 편이 훨씬 낫고, 이는 Active Directory 분할 권한 모델을 구현함으로써 이루어집니다. ",[554,658,661],{"href":659,"rel":660},"https://learn.microsoft.com/en-us/exchange/permissions/split-permissions/configure-exchange-for-split-permissions",[558],"Configure Exchange Server for split permissions | Microsoft Learn",[562,663],{},"\n그리고 Microsoft도 이에 동의합니다. “…encouraged to implement Active Directory split permissions” ",[554,666,669],{"href":667,"rel":668},"https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/active-directory-hardening-series---part-7-%E2%80%93-implementing-least-privilege/4366626",[558],"Active Directory Hardening Series - Part 7 – Implementing Least Privilege | Microsoft Community Hub",[671,672,674],"h2",{"id":673},"그런데-왜-아무도-하지-않을까요","그런데 왜 아무도 하지 않을까요?",[533,676,677,678,680],{},"분할 권한은 Exchange 2010 SP1이 나오기 전까지는 사용할 수 없었기 때문에 그 무렵에는 이미 모두가 기존 방식을 받아들인 상태였고, 이 기능이 생긴 뒤에도 보안 팀이 도입을 성공적으로 밀어붙이지 못한 것으로 보입니다.",[562,679],{},"\n게다가 이 기능은 관리자 및 IDM 프로세스의 변경을 강제했을 것입니다. 예를 들어 먼저 AD에서 사용자나 배포 목록을 생성한 뒤에야 Exchange를 사용해 “메일 사용(mail enable)”으로 설정하는 식입니다.",[533,682,683,684,686],{},"더 이상 사용할 수 없거나 작동하지 않는 cmdlet:",[562,685],{},[687,688,689],"code",{},"Add-DistributionGroupMember, New-DistributionGroup, New-Mailbox, New-MailContact, New-MailUser, New-RemoteMailbox, Remove-DistributionGroup, Remove-DistributionGroupMember, Remove-Mailbox, Remove-MailContact, Remove-MailUser, Remove-RemoteMailbox, Update-DistributionGroupMember, Add-ADPermission, Remove-ADPermission ",[528,691,693],{"id":692},"적용-방식-예시","적용 방식 예시:",[588,695,696,707],{},[551,697,698,699],{},"New-Mailbox(Exchange가 AD에 쓰는 경우)는 다음과 같이 바뀝니다:\n",[588,700,701,704],{},[551,702,703],{},"New-ADUser(adm.jdoe가 AD에 쓰는 경우)",[551,705,706],{},"Enable-Mailbox",[551,708,709],{},"SendAs 권한을 위한 Add-ADPermission은 Active Directory 사용자 및 컴퓨터의 보안 탭을 통해 수행해야 하며, 표준 관리자에게는 추가 AD 권한이 필요한 경우가 많습니다.",[671,711,713],{"id":712},"후회-없는-방법을-보여주세요","후회 없는 방법을 보여주세요!",[533,715,716,720],{},[717,718,719],"strong",{},"면책 조항",": 다음 링크와 문서를 반드시 완전히 읽고 이해한 뒤, 먼저 테스트 환경에서 수행하고, AD 백업이 최신 상태인지, 복구 절차가 확립되어 있는지 확인하세요!",[528,722,724],{"id":723},"현재-사용-현황-감사","현재 사용 현황 감사",[533,726,727,730,732],{},[717,728,729],{},"먼저 영향을 받는 cmdlet 중 어떤 것이 어떤 OU에서 사용되고 있는지 확인해야 합니다.",[562,731],{},[687,733,734],{},"$CsvPath =\"C:\\temp\\SplitPermissionAdminAuditLog.csv\"",[533,736,737],{},[687,738,739],{},"$Cmdlets = \"Add-ADPermission\",\"Remove-ADPermission\",\"New-DistributionGroup\",\"Remove-DistributionGroup\",\"Add-DistributionGroupMember\",\"Update-DistributionGroupMember\",\"Remove-DistributionGroupMember\",\"New-Mailbox\",\"Remove-Mailbox\",\"New-RemoteMailbox\",\"Remove-RemoteMailbox\",\"New-MailUser\",\"Remove-MailUser\",\"New-MailContact\",\"Remove-MailContact\"",[533,741,742],{},[687,743,744],{},"Search-AdminAuditLog -ResultSize 99000 -Cmdlets $Cmdlets| select RunDate,Caller,ObjectModified,CmdletName,@{Name='CmdletParameters';Expression={[string]::join(\",\", ($_.CmdletParameters))}},succeeded,error | Export-Csv -Path $CsvPath -Delimiter \";\" -Encoding Unicode -NoTypeInformation",[533,746,747,750,752,755,758,761],{},[717,748,749],{},"호출자 및 cmdlet의 빠른 분석:",[562,751],{},[687,753,754],{},"$CSVs=Import-Csv -Path $CsvPath -Delimiter \";\"",[687,756,757],{},"$CSVs|group Caller",[687,759,760],{},"$CSVs|group CmdletName",[687,762,763],{},"AD 권한이 필요한 위치를 파악하기 위해 CSV를 분석하세요. 모든 Exchange 관련 그룹을 전용 OU로 이동하여 최적화할 수도 있습니다.",[528,765,767],{"id":766},"분할-권한-모델-활성화","분할 권한 모델 활성화",[533,769,770,776,778,779,781,784,786,789,790],{},[717,771,772,775],{},[554,773,661],{"href":556,"rel":774},[558],"의 “Switch to Active Directory split permissions” 지침을 따르세요(RBAC 분할 권한이 아님).",[562,777],{},"\n본질적으로 이는 “Exchange Windows Permissions” 그룹의 위험한 권한을 제거하고 Exchange를 그룹 구성원에서도 제거합니다.",[562,780],{},[687,782,783],{},"Setup.exe /IAcceptExchangeServerLicenseTerms_DiagnosticDataOFF /PrepareAD /ActiveDirectorySplitPermissions:true",[562,785],{},[717,787,788],{},"되돌리려면 다음을 사용하세요:"," ",[687,791,792],{},"/ActiveDirectorySplitPermissions:false",[528,794,796],{"id":795},"ad-권한-부여","AD 권한 부여",[533,798,799,802,804,805,807,810,812,814],{},[717,800,801],{},"사용자 지정 AD 그룹을 만들고 Exchange 서버를 구성원으로 추가하세요.",[562,803],{},"\n먼저 OU 경로를 조정하세요!",[562,806],{},[687,808,809],{},"New-ADGroup -Name \"AD_Custom Exchange Split permissions replacement\" -GroupCategory Security -GroupScope DomainLocal -Path \"OU=Rights,OU=Groups,OU=T1,OU=_ADM,$((Get-ADDomain).DistinguishedName)\" -Description \"replaces the permissions lost by split permissions on relevant OUs\"",[562,811],{},[562,813],{},[687,815,816],{},"Add-ADGroupMember \"AD_Custom Exchange Split permissions replacement\" -Members \"Exchange Trusted Subsystem\"",[533,818,819,822,824],{},[717,820,821],{},"그룹을 통한 권한이 작동하도록 Exchange 서버를 재부팅하세요",[562,823],{},"\n사용 사례별로 AD 권한 위임을 쉽게 할 수 있도록 스크립트를 만들었습니다.",[826,827,828],"blockquote",{},[533,829,830,836,837,840],{},[717,831,832],{},[833,834,835],"em",{},"INFO:"," 이러한 권한이 없으면 Exchange 서버는 AD로부터 ",[687,838,839],{},"“INSUFF_ACCESS_RIGHTS”"," 오류를 받게 됩니다.",[533,842,843,852,854],{},[717,844,845,846,851],{},"glueckkanja GitHub에서 ",[554,847,850],{"href":848,"rel":849},"https://github.com/glueckkanja/code-snippets/blob/main/ExchangeADSplitPermission/Add-ExchangeADSplitPermissionOnOU.ps1",[558],"Add-ExchangeADSplitPermissionOnOU.ps1","을 다운로드하세요",[562,853],{},"\n다음 PermissionType을 부여할 수 있습니다:",[588,856,857,870,890,903],{},[551,858,859,862],{},[717,860,861],{},"CreateUserAndContact",[588,863,864,867],{},[551,865,866],{},"사용자 및 연락처에 대한 생성/삭제, ResetPassword, WriteAllProperties",[551,868,869],{},"Exchange cmdlet: New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact 및 이에 대응하는 Remove-*",[551,871,872,875],{},[717,873,874],{},"GroupManage",[588,876,877,880,883],{},[551,878,879],{},"그룹 생성/삭제, 구성원 수정",[551,881,882],{},"Exchange cmdlet: New-DistributionGroup, Remove-DistributionGroup, Add-DistributionGroupMember, Update-DistributionGroupMember, Remove-DistributionGroupMember",[551,884,885,886],{},"추가 사용 사례: 사용자가 https://",[887,888,889],"on-prem-exchange",{},"/EAC를 통해 자신이 소유한 DistributionGroup을 관리",[551,891,892,895],{},[717,893,894],{},"UserSendAs",[588,896,897,900],{},[551,898,899],{},"사용자에 대한 AD 권한 수정",[551,901,902],{},"Exchange cmdlet: Add-ADPermission",[551,904,905,908],{},[717,906,907],{},"GroupSendAs",[588,909,910,913],{},[551,911,912],{},"그룹에 대한 AD 권한 수정",[551,914,902],{},[528,916,918],{"id":917},"스크립트-사용-방법","스크립트 사용 방법:",[533,920,921],{},[687,922,923,789,926,789,932,789,935,789,940],{},[687,924,925],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU",[927,928,929],"b",{},[687,930,931],{},"\u003COU>",[687,933,934],{},"-PermissionType",[927,936,937],{},[687,938,939],{},"\u003CGroupManage|UserSendAs|GroupSendAs|CreateUserAndContact>",[687,941,942],{},"-Trustee \"AD_Custom Exchange Split permissions replacement",[533,944,945,946,948],{},"예:",[562,947],{},[687,949,950,789,953,789,957],{},[687,951,952],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=ExchangeGroups,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType",[927,954,955],{},[687,956,874],{},[687,958,959],{},"-Trustee \"AD_Custom Exchange Split permissions replacement\"",[533,961,962],{},[687,963,964,789,966,789,970],{},[687,965,952],{},[927,967,968],{},[687,969,907],{},[687,971,959],{},[533,973,974],{},[687,975,976,789,979,789,983],{},[687,977,978],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType",[927,980,981],{},[687,982,894],{},[687,984,959],{},[533,986,987],{},[687,988,989],{},[687,990,991],{},"Add-ExchangeADSplitPermissionOnOU.ps1 -TargetOU \"OU=Users,OU=HQ,OU=Alderaan,$((Get-ADDomain).DistinguishedName)\" -PermissionType CreateUserAndContact -Trustee \"AD_Custom Exchange Split permissions replacement\"",[528,993,995],{"id":994},"exchange-rbac-부여","Exchange RBAC 부여",[533,997,998,1001,1003],{},[717,999,1000],{},"Add-DistributionGroupMember 및 Remove-DistributionGroupMember cmdlet에 대해 -BypassSecurityGroupManagerCheck 매개 변수를 다시 활성화:",[562,1002],{},[687,1004,1005],{},"New-RoleGroup -Name \"SplitPermission Security Group Creation and Membership\" -Roles \"Security Group Creation and Membership\" -Members \"Organization Management\",\"Recipient Management\" -Description \"Brings back -BypassSecurityGroupManagerCheck to Add-DistributionGroupMember, but also needs AD ACL for Exchange Server on target DLs\" ",[826,1007,1008],{},[533,1009,1010,789,1014,1016],{},[717,1011,1012],{},[833,1013,835],{},[562,1015],{},"그렇지 않으면 \"-BypassSecurityGroupManagerCheck parameter is not available\" 또는 \"You don't have sufficient permissions. This operation can only be performed by a manager of the group\" 오류가 발생합니다.",[533,1018,1019,1021,1024,1026],{},[562,1020],{},[717,1022,1023],{},"필요한 매개 변수와 함께 New-Mailbox, New-RemoteMailbox, New-MailContact, Remove-... cmdlet을 다시 활성화:",[562,1025],{},[687,1027,1028],{},"New-RoleGroup -Name \"SplitPermission Mail Recipient Creation\" -Roles \"Mail Recipient Creation\" -Members \"Organization Management\",\"Recipient Management\" -Description \"Brings back New-Mailbox, New-RemoteMailbox, New-MailUser, New-MailContact and matching Remove-... cmdlets, but additionally Exchange needs AD ACL for Exchange Server on target OUs\"",[671,1030,1031],{"id":1031},"결론",[533,1033,1034],{},"이 가이드를 통해 더 많은 분들이 Exchange를 통한 침해로부터 Active Directory를 보호하는 이 중요한 단계를 밟기를 바랍니다. 저는 고객사에서 Exchange AD 분할 권한 모델과 이 글에서 소개한 적용 방식을 구현하면서 아직까지 문제를 겪은 적이 없습니다.",[533,1036,1037],{},"저는 Microsoft가 현재의 전부 아니면 전무 방식 대신, 이러한 세분화된 OU 기반 접근 방식을 기본적으로 구현하여 이 방식이 널리 채택되기를 바랍니다.",[533,1039,1040,1041,1046,1047,1052],{},"AD 계층화(Tiering)는 제가 특히 중요하게 여기는 부분입니다. 추가로, Exchange 서버에 Domain Admin(또는 어떤 Tier0 계정으로도) 로그온하지 말고 지금부터는 Tier1으로 취급하며 가능한 한 빨리 AD 계층화를 구현하세요.\n첫 단계로, AD 보안 및 제어 경로를 평가하기 위해 ",[554,1042,1045],{"href":1043,"rel":1044},"https://www.pingcastle.com/",[558],"PingCastle"," 또는 ",[554,1048,1051],{"href":1049,"rel":1050},"https://www.semperis.com/purple-knight/",[558],"Purple Knight"," 같은 도구를 권장합니다.",[1054,1055,1056],"style",{},"\ncode {\n  font-size: inherit\n}\n",{"title":1058,"searchDepth":1059,"depth":1059,"links":1060},"",2,[1061,1063,1064,1065,1066,1069,1076],{"id":530,"depth":1062,"text":531},3,{"id":545,"depth":1062,"text":546},{"id":579,"depth":1062,"text":580},{"id":613,"depth":1062,"text":614},{"id":673,"depth":1059,"text":674,"children":1067},[1068],{"id":692,"depth":1062,"text":693},{"id":712,"depth":1059,"text":713,"children":1070},[1071,1072,1073,1074,1075],{"id":723,"depth":1062,"text":724},{"id":766,"depth":1062,"text":767},{"id":795,"depth":1062,"text":796},{"id":917,"depth":1062,"text":918},{"id":994,"depth":1062,"text":995},{"id":1031,"depth":1059,"text":1031},"md","post",{"lang":1080,"seoTitle":1081,"titleClass":1082,"date":1083,"blogtitlepic":1084,"socialimg":1085,"customExcerpt":1086,"keywords":1087,"scripts":1088,"asideNav":1089,"maxContent":325,"published":484},"ko","Exchange AD 분할 권한: 최소 권한으로 Active Directory 보호하기","h2-font-size","2026-01-27","head-vulnerability-management","/blog/heads/head-vulnerability-management.jpg","이미 모든 사서함을 클라우드로 옮긴 조직에서도 온-프레미스 Exchange Server 설치는 여전히 흔하게 남아 있습니다. 또한 Exchange는 Active Directory 내에서 여전히 매우 강력한 권한을 가지므로, 대부분의 경우 전체 AD를 장악하고 나아가 기업 IT 대부분을 손에 넣는 강력한 공격 경로가 존재합니다. 이른바 “AD 분할 권한(AD Split permissions)”으로 전환하면 이 치명적인 권한이 제거되며, 저는 지금까지 도입을 가로막아 온 단점들을 없앤 솔루션을 설계했습니다.","Exchange Server, Active Directory, AD 분할 권한, RBAC, Exchange 권한, AdminSDHolder, 최소 권한, AD ACL, PowerShell",{"slick":325,"form":325},{"menuItems":1090},[1091,1093,1095,1097,1099],{"href":1092,"text":531},"#tldr-단점을-제거하면-어떨까요",{"href":1094,"text":580},"#지금-왜-신경-써야-할까요",{"href":1096,"text":674},"#그런데-왜-아무도-하지-않을까요",{"href":1098,"text":713},"#후회-없는-방법을-보여주세요",{"href":1100,"text":1031},"#결론","/posts/2026-01-27-exchange-active-directory",{"title":521,"description":1058},"posts/2026-01-27-exchange-active-directory","mcfYx9iUa3uq8uecLxNRRESZtYidQyM_fPQx2AmREsc",{"id":1106,"extension":1107,"meta":1108,"stem":8,"__hash__":1459},"authors_data/authors.json","json",{"path":1109,"Fritz Zurhorst":1110,"Alexander Schlindwein":1116,"Sophie Luna":1122,"Nadine Klein":1130,"Karsten Kleinschmidt":1136,"Julian Wendt":1144,"Holger Bunkradt":1149,"Ralf Mania":1155,"Oliver Kieselbach":1161,"Steffen Schwerdtfeger":1167,"Gunnar Winter":1175,"Jan Petersen":1180,"Thorsten Kunzi":1185,"Moritz Pohl":1189,"Thorben Pöschus":1194,"Christoph Hannebauer":1200,"Marco Scheel":1204,"Christopher Brumm":1209,"Florian Klante":1216,"Niklas Bachmann":1221,"Nils Krautkrämer":1226,"Patrick Treptau":1232,"Peter Beckendorf":1237,"Patrick Sobau":1242,"Jörg Wunderlich":1247,"Michael Breither":1251,"Christian Kanja":1256,"Zeba Hoffmann":1262,"Jochen Fröhlich":1267,"Jan Geisbauer":1271,"Gerrit Reinke":1283,"Christian Kordel":1289,"Stephan Wälde":1293,"Carolin Kanja":1298,"Adrian Ritter":1304,"Marvin Bangert":1309,"Thorsten Pickhan":1315,"Christian Lorenz":1321,"Denis Böhm":1326,"Fabian Bader":1331,"Juan Jose Fernandez Perez":1337,"Mahschid Sayyar":1342,"Benjamin Dassow":1347,"Markus Walschburger":1352,"Jonathan Haist":1357,"Daniel Rohregger":1362,"Thomas Naunheim":1367,"Florian Stöckl":1372,"Pascal Asch":1377,"Markus Kättner":1382,"Anna Ulbricht":1389,"Annette Brauns":1396,"body":1402,"title":1458},"/authors",{"display_name":1111,"avatar":1112,"permalink":1113,"linkedin":1114,"imageOffsetTop":1115},"Fritz Zurhorst","people/people-fritz-zurhorst.png","/authors/fritz-zurhorst","friedemann-z","72%",{"display_name":1117,"avatar":1118,"permalink":1119,"twitter":1120,"linkedin":1121},"Alexander Schlindwein","people/people-alexander-rudolph.png","/authors/alexander-schlindwein","AlexanderOnIT","schlindwein-alexander",{"display_name":1123,"avatar":1124,"permalink":1125,"twitter":1126,"linkedin":1127,"imageOffsetLeft":1128,"imageOffsetTop":1129},"Sophie Luna","people/people-sophie-luna.jpg","/authors/sophie-luna","glueckkanjagab","../company/glueckkanja-gab","58%","67%",{"display_name":1131,"avatar":1132,"permalink":1133,"twitter":1134,"linkedin":1135,"imageOffsetTop":1115},"Nadine Klein","people/people-nadine-kern.png","/authors/nadine-kern","nadineausRT","nadine-kern",{"display_name":1137,"avatar":1138,"permalink":1139,"twitter":1140,"linkedin":1141,"imageOffsetTop":1142,"imageOffsetLeft":1143},"Karsten Kleinschmidt","/c_pad,w_800,h_700/people/karsten-kleinschmidt.jpg","/authors/karsten-kleinschmidt","KarstenonIT","karstenkleinschmidt","60%","57%",{"display_name":1145,"avatar":1146,"permalink":1147,"linkedin":1148},"Julian Wendt","people/people-julian-wendt.png","/authors/julian-wendt","julian-wendt",{"display_name":1150,"avatar":1151,"permalink":1152,"linkedin":1153,"twitter":1154},"Holger Bunkradt","people/people-holger-bunkradt.png","/authors/holger-bunkradt","holger-bunkradt-12b5053b","hbunkradt",{"display_name":1156,"avatar":1157,"permalink":1158,"linkedin":1159,"twitter":1160},"Ralf Mania","people/people-ralf-mania.png","/authors/ralf-mania","ralf-mania-146a2757","RaMa1976",{"display_name":1162,"avatar":1163,"permalink":1164,"linkedin":1165,"twitter":1166},"Oliver Kieselbach","people/people-oliver-kieselbach.png","/authors/oliver-kieselbach","oliver-kieselbach-a4a3409","okieselbT",{"display_name":1168,"avatar":1169,"permalink":1170,"linkedin":1171,"twitter":1172,"imageOffsetTop":1173,"imageOffsetLeft":1174},"Steffen Schwerdtfeger","people/people-steffen-schwerdtfeger.png","/authors/steffen-schwerdtfeger","steffen-schwerdtfeger","SteffenAtCloud","79%","51%",{"display_name":1176,"avatar":1177,"permalink":1178,"twitter":1126,"linkedin":1179},"Gunnar Winter","people/people-gunnar-winter.jpg","/authors/gunnar-winter","company/glueckkanja-gab",{"display_name":1181,"avatar":1182,"permalink":1183,"twitter":1126,"linkedin":1184},"Jan Petersen","people/jan-petersen.png","/authors/jan-petersen","jan-petersen-26a901",{"display_name":1186,"avatar":1187,"permalink":1188,"twitter":1126,"linkedin":1179,"imageOffsetTop":1115},"Thorsten Kunzi","people/author-thorsten-kunzi.png","/authors/thorsten-kunzi",{"display_name":1190,"avatar":1191,"permalink":1192,"twitter":1126,"linkedin":1193},"Dr. Moritz Pohl","people/people-moritz-pohl.png","/authors/moritz-pohl","dr-moritz-pohl",{"display_name":1195,"avatar":1196,"permalink":1197,"twitter":1198,"linkedin":1199},"Thorben Pöschus","people/thorben.poeschus.png","/authors/thorben-poeschus","TPO901","thorben-pöschus-624693b7",{"display_name":1201,"avatar":1202,"permalink":1203,"twitter":1126,"linkedin":1179,"imageOffsetTop":1115},"Dr. Christoph Hannebauer","people/people-christoph-hannebauer.png","/authors/christoph-hannebauer",{"display_name":1205,"avatar":1206,"permalink":1207,"twitter":1208,"linkedin":1208},"Marco Scheel","people/people-marco-scheel.png","/authors/marco-scheel","marcoscheel",{"display_name":1210,"avatar":1211,"permalink":1212,"twitter":1213,"linkedin":1214,"imageOffsetTop":1215},"Christopher Brumm","people/people-christopher-brumm.jpg","/authors/christopher-brumm","cbrhh","christopherbrumm","66%",{"display_name":1217,"avatar":1218,"permalink":1219,"linkedin":1220,"twitter":1126},"Florian Klante","people/florian-klante.jpg","/authors/florian-klante","florian-klante-6031b31b",{"display_name":1222,"avatar":1223,"permalink":1224,"linkedin":1225,"twitter":1126},"Niklas Bachmann","people/niklas.bachmann.png","/authors/niklas-bachmann","niklas-bachmann-66a863158",{"display_name":1227,"avatar":1228,"permalink":1229,"twitter":1230,"linkedin":1231},"Nils Krautkrämer","people/nils-krautkraemer.png","/authors/nils-krautkraemer","KrauNils","nils-krautkrämer-8b04bb250",{"display_name":1233,"avatar":1234,"permalink":1235,"linkedin":1236,"twitter":1126},"Patrick Treptau","people/people-patrick-treptau.png","/authors/patrick-traptau","ptreptau",{"display_name":1238,"avatar":1239,"permalink":1240,"linkedin":1241,"twitter":1126,"imageOffsetTop":1115},"Peter Beckendorf","people/peter-beckendorf.png","/authors/peter-beckendorf","peter-beckendorf-29a239b1",{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"twitter":1126},"Patrick Sobau","people/patrick-sobau.png","/authors/patrick-sobau","patrick-sobau",{"display_name":1248,"avatar":1249,"permalink":1250,"twitter":1126},"Jörg Wunderlich","people/joerg-wunderlich.png","/authors/joerg-wunderlich",{"display_name":1252,"avatar":1253,"permalink":1254,"twitter":1126,"linkedin":1255},"Michael Breither","people/people-michael-breither.jpg","/authors/michael-breither","michaelbreither",{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261},"Christian Kanja","people/people-christian-kanja.png","/authors/christian-kanja","cekageka","christian-kanja",{"display_name":1263,"avatar":1264,"permalink":1265,"linkedin":1266,"twitter":1126},"Zeba Hoffmann","people/zeba-hoffmann.png","/authors/zeba-hoffmann","zebahoffmann",{"display_name":1268,"avatar":1269,"permalink":1270,"twitter":1126,"linkedin":1179},"Jochen Fröhlich","people/people-jochen-froehlich.png","/authors/jochen-froehlich",{"display_name":1272,"avatar":1273,"permalink":1274,"twitter":1275,"linkedin":1275,"imageOffsetTop":1115,"socials":1276},"Jan Geisbauer","people/people-jan-geisbauer-csoc.png","/authors/jan-geisbauer","JanGeisbauer",[1277,1280],{"text":1278,"href":1279},"Blog","https://emptydc.com",{"text":1281,"href":1282},"Podcast","https://hairlessinthecloud.com",{"display_name":1284,"avatar":1285,"permalink":1286,"twitter":1287,"linkedin":1288},"Gerrit Reinke","people/gerrit-reinke.png","/authors/gerrit-reinke","GLWRe","glwr",{"display_name":1290,"avatar":1291,"permalink":1292,"twitter":1126,"linkedin":1179},"Christian Kordel","people/christian-kordel.png","/authors/christian-kordel",{"display_name":1294,"avatar":1295,"permalink":1296,"twitter":1297,"linkedin":1179},"Stephan Wälde","people/people-stephan-waelde.png","/authors/stephan-waelde","stephanwaelde",{"display_name":1299,"avatar":1300,"permalink":1301,"twitter":1302,"linkedin":1303},"Carolin Kanja","people/people-carolin-kanja.jpg","/authors/carolin-kanja","fraukanja","carolin-kanja",{"display_name":1305,"avatar":1306,"permalink":1307,"twitter":1308,"linkedin":1308},"Adrian Ritter","people/people-adrian-ritter.png","/authors/adrian-ritter","adrianritter",{"display_name":1310,"avatar":1311,"permalink":1312,"twitter":1313,"linkedin":1314},"Marvin Bangert","people/people-marvin-bangert.png","/authors/marvin-bangert","marvinbangert","marvin-bangert",{"display_name":1316,"avatar":1317,"permalink":1318,"twitter":1319,"linkedin":1320},"Thorsten Pickhan","people/people-thorsten-pickhan.png","/authors/thorsten-pickhan","tpickhan","thorsten-pickhan",{"display_name":1322,"avatar":1323,"permalink":1324,"linkedin":1325,"twitter":1126},"Christian Lorenz","people/people-christian-lorenz.png","/authors/christian-lorenz","christianlorenz95",{"display_name":1327,"avatar":1328,"permalink":1329,"linkedin":1330,"twitter":1126},"Denis Böhm","people/people-denis-boehm.png","/authors/denis-boehm","denis-böhm-3bb834135",{"display_name":1332,"avatar":1333,"permalink":1334,"linkedin":1335,"twitter":1336},"Fabian Bader","people/people-fabian-bader.jpg","/authors/fabian-bader","fabianbader","fabian_bader",{"display_name":1338,"avatar":1339,"permalink":1340,"linkedin":1341},"Juan Jose Fernandez Perez","people/people-juan-jose-fernandez.jpg","/authors/juan-jose-fernandez-perez","juan-jose-fernandez-perez-8016055",{"display_name":1343,"avatar":1344,"permalink":1345,"linkedin":1346},"Mahschid Sayyar","people/people-mahschid-sayyar.jpg","/authors/mahschid-sayyar","mahschid-sayyar-97544463",{"display_name":1348,"avatar":1349,"permalink":1350,"linkedin":1351},"Benjamin Dassow","people/people-benjamin-dassow.jpg","/authors/benjamin-dassow","benjamin-dassow",{"display_name":1353,"avatar":1354,"permalink":1355,"linkedin":1356},"Markus Walschburger","people/people-markus-walschburger.jpg","/authors/markus-walschburger","markus-walschburger",{"display_name":1358,"avatar":1359,"permalink":1360,"linkedin":1361,"imageOffsetTop":1115},"Jonathan Haist","people/people-jonathan-haist.jpg","/authors/jonathan-haist","jonathanhaist",{"display_name":1363,"avatar":1364,"permalink":1365,"linkedin":1366,"imageOffsetTop":1115},"Daniel Rohregger","people/people-daniel-rohregger.jpg","/authors/daniel-rohregger","drohregger",{"display_name":1368,"avatar":1369,"permalink":1370,"linkedin":1371,"imageOffsetTop":1215},"Thomas Naunheim","people/people-thomas-naunheim.jpg","/authors/thomas-naunheim","thomasnaunheim",{"display_name":1373,"avatar":1374,"permalink":1375,"linkedin":1376,"imageOffsetTop":1215},"Florian Stöckl","people/people-florian-stoeckl.jpg","/authors/florian-stoeckl","florianstoeckl",{"display_name":1378,"avatar":1379,"permalink":1380,"linkedin":1381,"imageOffsetTop":1215},"Pascal Asch","people/Pascal.Asch.648.jpg","/authors/pascal-asch","pascal-asch",{"display_name":1383,"avatar":1384,"permalink":1385,"linkedin":1386,"imageOffsetTop":1387,"imageOffsetLeft":1388},"Markus Kättner","people/markus-kaettner.jpg","/authors/markus-kaettner","markus-kättner-b600119","62%","63%",{"display_name":1390,"avatar":1391,"permalink":1392,"linkedin":1393,"imageOffsetTop":1394,"imageOffsetLeft":1395},"Anna Ulbricht","people/anna-katharina.ulbricht-09.png","/authors/anna-ulbricht","anna-katharina-u-a67702199","70%","50%",{"display_name":1397,"avatar":1398,"permalink":1399,"linkedin":1400,"imageOffsetTop":1401,"imageOffsetLeft":1142},"Annette Brauns","people/Annette-Brauns-8.jpg","/authors/annette-brauns","annette-brauns","95%",{"Fritz Zurhorst":1403,"Alexander Schlindwein":1404,"Sophie Luna":1405,"Nadine Klein":1406,"Karsten Kleinschmidt":1407,"Julian Wendt":1408,"Holger Bunkradt":1409,"Ralf Mania":1410,"Oliver Kieselbach":1411,"Steffen Schwerdtfeger":1412,"Gunnar Winter":1413,"Jan Petersen":1414,"Thorsten Kunzi":1415,"Moritz Pohl":1416,"Thorben Pöschus":1417,"Christoph Hannebauer":1418,"Marco Scheel":1419,"Christopher Brumm":1420,"Florian Klante":1421,"Niklas Bachmann":1422,"Nils Krautkrämer":1423,"Patrick Treptau":1424,"Peter Beckendorf":1425,"Patrick Sobau":1426,"Jörg Wunderlich":1427,"Michael Breither":1428,"Christian Kanja":1429,"Zeba Hoffmann":1430,"Jochen Fröhlich":1431,"Jan Geisbauer":1432,"Gerrit Reinke":1436,"Christian Kordel":1437,"Stephan Wälde":1438,"Carolin Kanja":1439,"Adrian Ritter":1440,"Marvin Bangert":1441,"Thorsten Pickhan":1442,"Christian Lorenz":1443,"Denis Böhm":1444,"Fabian Bader":1445,"Juan Jose Fernandez Perez":1446,"Mahschid Sayyar":1447,"Benjamin Dassow":1448,"Markus Walschburger":1449,"Jonathan Haist":1450,"Daniel Rohregger":1451,"Thomas Naunheim":1452,"Florian Stöckl":1453,"Pascal Asch":1454,"Markus Kättner":1455,"Anna Ulbricht":1456,"Annette Brauns":1457},{"display_name":1111,"avatar":1112,"permalink":1113,"linkedin":1114,"imageOffsetTop":1115},{"display_name":1117,"avatar":1118,"permalink":1119,"twitter":1120,"linkedin":1121},{"display_name":1123,"avatar":1124,"permalink":1125,"twitter":1126,"linkedin":1127,"imageOffsetLeft":1128,"imageOffsetTop":1129},{"display_name":1131,"avatar":1132,"permalink":1133,"twitter":1134,"linkedin":1135,"imageOffsetTop":1115},{"display_name":1137,"avatar":1138,"permalink":1139,"twitter":1140,"linkedin":1141,"imageOffsetTop":1142,"imageOffsetLeft":1143},{"display_name":1145,"avatar":1146,"permalink":1147,"linkedin":1148},{"display_name":1150,"avatar":1151,"permalink":1152,"linkedin":1153,"twitter":1154},{"display_name":1156,"avatar":1157,"permalink":1158,"linkedin":1159,"twitter":1160},{"display_name":1162,"avatar":1163,"permalink":1164,"linkedin":1165,"twitter":1166},{"display_name":1168,"avatar":1169,"permalink":1170,"linkedin":1171,"twitter":1172,"imageOffsetTop":1173,"imageOffsetLeft":1174},{"display_name":1176,"avatar":1177,"permalink":1178,"twitter":1126,"linkedin":1179},{"display_name":1181,"avatar":1182,"permalink":1183,"twitter":1126,"linkedin":1184},{"display_name":1186,"avatar":1187,"permalink":1188,"twitter":1126,"linkedin":1179,"imageOffsetTop":1115},{"display_name":1190,"avatar":1191,"permalink":1192,"twitter":1126,"linkedin":1193},{"display_name":1195,"avatar":1196,"permalink":1197,"twitter":1198,"linkedin":1199},{"display_name":1201,"avatar":1202,"permalink":1203,"twitter":1126,"linkedin":1179,"imageOffsetTop":1115},{"display_name":1205,"avatar":1206,"permalink":1207,"twitter":1208,"linkedin":1208},{"display_name":1210,"avatar":1211,"permalink":1212,"twitter":1213,"linkedin":1214,"imageOffsetTop":1215},{"display_name":1217,"avatar":1218,"permalink":1219,"linkedin":1220,"twitter":1126},{"display_name":1222,"avatar":1223,"permalink":1224,"linkedin":1225,"twitter":1126},{"display_name":1227,"avatar":1228,"permalink":1229,"twitter":1230,"linkedin":1231},{"display_name":1233,"avatar":1234,"permalink":1235,"linkedin":1236,"twitter":1126},{"display_name":1238,"avatar":1239,"permalink":1240,"linkedin":1241,"twitter":1126,"imageOffsetTop":1115},{"display_name":1243,"avatar":1244,"permalink":1245,"linkedin":1246,"twitter":1126},{"display_name":1248,"avatar":1249,"permalink":1250,"twitter":1126},{"display_name":1252,"avatar":1253,"permalink":1254,"twitter":1126,"linkedin":1255},{"display_name":1257,"avatar":1258,"permalink":1259,"twitter":1260,"linkedin":1261},{"display_name":1263,"avatar":1264,"permalink":1265,"linkedin":1266,"twitter":1126},{"display_name":1268,"avatar":1269,"permalink":1270,"twitter":1126,"linkedin":1179},{"display_name":1272,"avatar":1273,"permalink":1274,"twitter":1275,"linkedin":1275,"imageOffsetTop":1115,"socials":1433},[1434,1435],{"text":1278,"href":1279},{"text":1281,"href":1282},{"display_name":1284,"avatar":1285,"permalink":1286,"twitter":1287,"linkedin":1288},{"display_name":1290,"avatar":1291,"permalink":1292,"twitter":1126,"linkedin":1179},{"display_name":1294,"avatar":1295,"permalink":1296,"twitter":1297,"linkedin":1179},{"display_name":1299,"avatar":1300,"permalink":1301,"twitter":1302,"linkedin":1303},{"display_name":1305,"avatar":1306,"permalink":1307,"twitter":1308,"linkedin":1308},{"display_name":1310,"avatar":1311,"permalink":1312,"twitter":1313,"linkedin":1314},{"display_name":1316,"avatar":1317,"permalink":1318,"twitter":1319,"linkedin":1320},{"display_name":1322,"avatar":1323,"permalink":1324,"linkedin":1325,"twitter":1126},{"display_name":1327,"avatar":1328,"permalink":1329,"linkedin":1330,"twitter":1126},{"display_name":1332,"avatar":1333,"permalink":1334,"linkedin":1335,"twitter":1336},{"display_name":1338,"avatar":1339,"permalink":1340,"linkedin":1341},{"display_name":1343,"avatar":1344,"permalink":1345,"linkedin":1346},{"display_name":1348,"avatar":1349,"permalink":1350,"linkedin":1351},{"display_name":1353,"avatar":1354,"permalink":1355,"linkedin":1356},{"display_name":1358,"avatar":1359,"permalink":1360,"linkedin":1361,"imageOffsetTop":1115},{"display_name":1363,"avatar":1364,"permalink":1365,"linkedin":1366,"imageOffsetTop":1115},{"display_name":1368,"avatar":1369,"permalink":1370,"linkedin":1371,"imageOffsetTop":1215},{"display_name":1373,"avatar":1374,"permalink":1375,"linkedin":1376,"imageOffsetTop":1215},{"display_name":1378,"avatar":1379,"permalink":1380,"linkedin":1381,"imageOffsetTop":1215},{"display_name":1383,"avatar":1384,"permalink":1385,"linkedin":1386,"imageOffsetTop":1387,"imageOffsetLeft":1388},{"display_name":1390,"avatar":1391,"permalink":1392,"linkedin":1393,"imageOffsetTop":1394,"imageOffsetLeft":1395},{"display_name":1397,"avatar":1398,"permalink":1399,"linkedin":1400,"imageOffsetTop":1401,"imageOffsetLeft":1142},"Authors","1csawlkJxRljy93GTOnXEkwLqAv9Lcj-apxRvoodAOY",{"list":1461,"authors":1678},[1462,1480,1494,1508,1524,1537,1550,1563,1575,1591,1605,1620,1638,1649,1662],{"id":1463,"title":1464,"author":1465,"cta":494,"description":1058,"hideInRecent":484,"layout":1078,"meta":1466,"moment":1472,"path":1473,"stem":1474,"tags":1475,"webcast":484},"content_ko/posts/2026-09-22-end-of-mfa-sms.md","MFA SMS의 종말",[1137],{"lang":1080,"date":1467,"categories":1468,"blogtitlepic":1470,"customExcerpt":1471},"2026-09-21",[1469],"Security","head-conditional-access.jpg","기업이 지금 피싱에 강하고 가능한 한 비밀번호 없는 인증 방식으로 전환해야 하는 이유.","2026-09-22","/posts/2026-09-22-end-of-mfa-sms","posts/2026-09-22-end-of-mfa-sms",[1469,1476,1477,1478,1479],"Authentication","Microsoft Entra ID","MFA","Passkeys",{"id":1481,"title":1482,"author":1483,"cta":494,"description":1058,"hideInRecent":484,"layout":1078,"meta":1484,"moment":1467,"path":1488,"stem":1489,"tags":1490,"webcast":484},"content_ko/posts/2026-09-21-clickfix-prevent-detect.md","ClickFix. 사용자가 곧 익스플로잇일 때, 그리고 이를 멈추는 방법",[1111,1131],{"lang":1080,"date":1467,"categories":1485,"blogtitlepic":1486,"customExcerpt":1487},[1469],"head-clickfix.jpg","ClickFix는 사용자를 자기 자신의 공격자로 만듭니다. 가짜 CAPTCHA 하나, 복사·붙여넣기 한 번으로 악성 코드가 메모리에서 실행되고, 디스크에는 아무것도 남지 않습니다. Microsoft Defender가 이 공격을 어떻게 탐지하는지, 탐지가 어디서 한계에 부딪히는지, 그리고 RunMRU 헌트와 네 개의 보호 레이어로 그 공백을 어떻게 메우는지 살펴봅니다.","/posts/2026-09-21-clickfix-prevent-detect","posts/2026-09-21-clickfix-prevent-detect",[1491,1492,1493],"Defender","SOC","Endpoint Security",{"id":1495,"title":1496,"author":1497,"cta":494,"description":1058,"hideInRecent":484,"layout":1078,"meta":1498,"moment":1467,"path":1502,"stem":1503,"tags":1504,"webcast":484},"content_ko/posts/2026-09-21-red-tenant-dark-tenant-cio.md","관리 업무와 일상 업무를 한 컴퓨터에서? Game Over.",[1272],{"lang":1080,"date":1467,"categories":1499,"blogtitlepic":1500,"customExcerpt":1501},[1469],"head-game-over-en.jpg","CIO에게 테넌트 하나로는 충분하지 않은 이유, 그리고 두 번째 테넌트가 좀처럼 함께 고려되지 않는 이유입니다. Managed Red Tenant는 관리 업무를 오피스 환경으로부터 아키텍처 차원에서 분리하고, Managed Dark Tenant는 방어가 무너졌을 때도 기업이 계속 움직일 수 있게 합니다. 이것이 운영 모델과 SOC 신호, 그리고 NISG 2026에 따른 입증 의무에 어떤 의미를 갖는지 살펴봅니다.","/posts/2026-09-21-red-tenant-dark-tenant-cio","posts/2026-09-21-red-tenant-dark-tenant-cio",[1469,1505,1506,1507],"Privileged Access","Zero Trust","NIS2",{"id":1509,"title":1510,"author":1511,"cta":494,"description":1512,"hideInRecent":484,"layout":1078,"meta":1513,"moment":1514,"path":1519,"stem":1520,"tags":1521,"webcast":484},"content_ko/posts/2026-08-08-isg-germany-2026.md","네 번의 Leader. ISG 독일 연구 2026 속 glueckkanja",[1299],"ISG는 올해 연구의 이름을 바꿨습니다. Microsoft Cloud Ecosystem은 Microsoft AI and Cloud Ecosystem이 되었고, 이름과 함께 기준도 옮겨 갔습니다. 이제 평가 대상은 누가 Microsoft 플랫폼을 도입하는지가 아니라, 누가 Copilot과 에이전트, AI 워크로드를 통제 가능하게 운영하는지입니다. 새로운 기준은 저희의 위치를 바꾸지 않았습니다. ISG Provider Lens® 연구 독일 2026은 저희를 네 개 사분면의 Leader로 포지셔닝합니다. Microsoft Productivity and Business Process Services와 Azure Managed Services에서 각각 Large Market과 Mid Market입니다. 2021년, 2023년, 2024년, 2025년에 이어 독일에서 다섯 번째 Leader 등급이며, 스위스에서는 2주 전에 Leader 사분면으로의 도약이 있었습니다.",{"lang":1080,"date":1514,"categories":1515,"blogtitlepic":1517,"customExcerpt":1518},"2026-08-08",[1516],"Corporate","head-isg-de-2026.png","ISG Provider Lens® 연구 2026은 독일에서 glueckkanja를 네 개 사분면의 Leader로 포지셔닝했습니다. Microsoft Productivity and Business Process Services와 Azure Managed Services에서 각각 Large Market과 Mid Market입니다. 연구의 이름은 이제 Microsoft AI and Cloud Ecosystem이 되었고, 기준도 옮겨 갔습니다. 평가 대상은 AI와 에이전트 워크로드를 통제 가능하게 운영하는 곳입니다.","/posts/2026-08-08-isg-germany-2026","posts/2026-08-08-isg-germany-2026",[1522,1523],"Award","ISG",{"id":1525,"title":1526,"author":1527,"cta":494,"description":1528,"hideInRecent":484,"layout":1078,"meta":1529,"moment":1530,"path":1534,"stem":1535,"tags":1536,"webcast":484},"content_ko/posts/2026-07-31-isg-switzerland-2026.md","Rising Star에서 Leader로. ISG 스위스 연구 2026 속 glueckkanja",[1299],"2024년 저희는 glueckkanja Switzerland AG를 설립하고 베른 Bahnhofplatz 10b의 zentroom에 사무실을 마련했습니다. 2025년 ISG는 스위스 시장에서 저희를 Rising Star로 분류했습니다. 애널리스트들이 Leader 사분면으로 도약할 것으로 보는 공급업체라는 뜻이었습니다. 이제 그 도약이 기록되었습니다. ISG Provider Lens® 연구 2026은 스위스에서 저희를 Microsoft AI and Cloud Ecosystem 사분면의 Leader로, Azure Managed Services와 Microsoft Productivity and Business Process Services 영역에서 포지셔닝했습니다.",{"lang":1080,"date":1530,"categories":1531,"blogtitlepic":1532,"customExcerpt":1533},"2026-07-31",[1516],"head-isg-ch-2026.png","ISG Provider Lens® 연구 2026은 스위스에서 glueckkanja를 Microsoft AI and Cloud Ecosystem 사분면의 Leader로, Azure Managed Services와 Microsoft Productivity and Business Process Services 영역에서 포지셔닝했습니다. 베른 시장 진출 2년 만에, Rising Star 선정 1년 만의 일입니다.","/posts/2026-07-31-isg-switzerland-2026","posts/2026-07-31-isg-switzerland-2026",[1522,1523],{"id":1538,"title":1539,"author":1540,"cta":494,"description":1058,"hideInRecent":484,"layout":1078,"meta":1541,"moment":1542,"path":1546,"stem":1547,"tags":1548,"webcast":484},"content_ko/posts/2026-07-24-outbreak-openai-hugging-face.md","Outbreak. OpenAI/Hugging Face 사건이 말해 주는 것과 말해 주지 않는 것",[1272],{"lang":1080,"date":1542,"categories":1543,"blogtitlepic":1544,"customExcerpt":1545},"2026-07-24",[1469],"head-outbreak.jpg","AI 에이전트가 자신의 테스트 환경에서 탈출해 제로데이를 찾아내고 다른 기업을 해킹했습니다. 각본처럼 들리지만 2026년 7월에 실제로 일어난 일입니다. 이제 차분하게 자리를 잡아 볼 시간입니다. 약간의 심리학, 두 명의 보안 베테랑, 그리고 이것이 여러분의 방어에 무엇을 의미하는지에 대한 질문과 함께.","/posts/2026-07-24-outbreak-openai-hugging-face","posts/2026-07-24-outbreak-openai-hugging-face",[1549,1492,1506],"AI",{"id":1551,"title":1552,"author":1553,"cta":494,"description":1554,"hideInRecent":484,"layout":1078,"meta":1555,"moment":1556,"path":1560,"stem":1561,"tags":1562,"webcast":484},"content_ko/posts/2026-07-22-isg-cybersecurity-2026.md","Leader 그리고 Rising Star. ISG 사이버보안 연구 2026 속 glueckkanja",[1299],"사분면에 새로 진입해 곧바로 Leader가 되었습니다. ISG Provider Lens® 연구 \"Cybersecurity – Services and Solutions 2026\"은 glueckkanja를 독일 중견·중소기업을 위한 Next-Gen SOC/MDR Services 영역의 Leader로 포지셔닝했습니다. Next-Gen SOC/MDR Services 전체 시장에서 ISG는 저희를 Rising Star로 선정했습니다. 즉, 애널리스트들이 향후 12~24개월 안에 Leader 사분면으로 도약할 것으로 보는 공급업체라는 뜻입니다.",{"lang":1080,"date":1556,"categories":1557,"blogtitlepic":1558,"customExcerpt":1559},"2026-07-22",[1516],"head-isg-cybersecurity-2026.png","ISG Provider Lens® 연구 Cybersecurity 2026이 glueckkanja를 Next-Gen SOC/MDR Services(Midmarket) 사분면의 Leader로 선정했습니다. Next-Gen SOC/MDR Services 전체 시장에서는 저희가 Rising Star입니다. ISG는 저희의 시장 평균을 웃도는 성장, 깊은 Microsoft 보안 전문성, 그리고 독일에서 운영되는 24/7 SOC를 인정했습니다.","/posts/2026-07-22-isg-cybersecurity-2026","posts/2026-07-22-isg-cybersecurity-2026",[1522,1523,1469],{"id":1564,"title":1565,"author":1566,"cta":494,"description":1567,"hideInRecent":484,"layout":1078,"meta":1568,"moment":1569,"path":1572,"stem":1573,"tags":1574,"webcast":484},"content_ko/posts/2026-07-06-the-holy-trinity.md","The Holy Trinity: AI가 실제로 일하려면 무엇이 필요한가",[1299],"어느 제조 기업이 자사의 SKU 14,000개 중 실제로 수익을 내는 것이 무엇인지 알고 싶어 합니다. 그 답은 단 하나의 데이터 포인트도 서로 주고받은 적이 없는 세 개의 시스템에 흩어져 있습니다. 얼마 전까지만 해도 그 답을 얻는 데는 세 개 부서와 2주, 그리고 상당한 선의가 필요했습니다. 2026년 초부터는 AI가 이 질문에 몇 분 안에 답할 수 있습니다. 데이터를 뒤지고, 연관 관계를 만들고, 권고안을 내놓는 것입니다. 단, AI가 접근할 수 있다는 전제에서입니다.",{"lang":1080,"date":1569,"categories":1570,"blogtitlepic":1571},"2026-07-06",[131],"head-the-holy-trinity","/posts/2026-07-06-the-holy-trinity","posts/2026-07-06-the-holy-trinity",[1549,131],{"id":1576,"title":1577,"author":1578,"cta":494,"description":1579,"hideInRecent":484,"layout":1078,"meta":1580,"moment":1581,"path":1585,"stem":1586,"tags":1587,"webcast":484},"content_ko/posts/2026-07-01-onboarding-process.md","계약서에 서명하셨습니다. 저희 온보딩은 이렇게 진행됩니다",[1390],"온보딩은 실제로 어떻게 진행되나요? 지원자들과 이야기를 나누다 보면 거듭 마주치는 질문입니다. 온보딩이 삐걱대며 흘러가는 경험을 이미 해 본 분이 많기 때문입니다. 그래서 저희는 처음부터 여러분이 좋은 느낌을 받으실 수 있도록 하는 것을 더욱 중요하게 생각합니다.",{"lang":1080,"date":1581,"categories":1582,"blogtitlepic":1583,"customExcerpt":1584},"2026-07-01",[1516],"Onboarding_Blogheader","계약서에 서명을 마쳤고, 가장 큰 첫걸음은 이미 내디뎠습니다. 그렇다면 이제 어떻게 될까요? PreBoarding부터 팀에서 보내는 첫 주까지, 저희 온보딩의 무대 뒤로 여러분을 안내합니다.","/posts/2026-07-01-onboarding-process","posts/2026-07-01-onboarding-process",[1588,1589,1590],"Employer Branding","Onboarding","Unternehmenskultur",{"id":1592,"title":1593,"author":1594,"cta":494,"description":1595,"hideInRecent":484,"layout":1078,"meta":1596,"moment":1597,"path":1601,"stem":1602,"tags":1603,"webcast":484},"content_ko/posts/2026-06-26-frontier-partner.md","Microsoft Frontier Partner: 우리는 그 일원입니다",[1299],"Microsoft 파트너 생태계에는 다양한 인증이 존재하지만, Frontier Partner Badge는 그 구조 자체에서 다른 인증들과 구별됩니다. 이 배지는 신청할 수 있는 것이 아니라, Microsoft의 주도로 극소수의 파트너에게만 부여되며, 대상 파트너는 한 가지 분야에서 두각을 나타내는 것이 아니라 여러 분야에서 동시에 역량을 입증해야 합니다. 이때 Microsoft는 Cloud & AI Platforms, AI Business Solutions, Security 세 영역에서 입증된 역량을 동일한 비중으로 검증하며, 이를 통해 AI를 기존 IT 위에 얹는 부가물로 이해하는 것이 아니라 아이덴티티에서 엔드포인트를 거쳐 실제 운영 중인 AI까지 이어지는 일관된 아키텍처의 결과로 이해하는 기업을 대상으로 삼습니다.",{"lang":1080,"date":1597,"categories":1598,"blogtitlepic":1599,"customExcerpt":1600},"2026-06-26",[1516],"head-frontier-partner-badge.jpg","얼마 전 Microsoft AI Cloud Partner Program에 새로운 최고 등급의 인증인 Frontier Partner Badge가 도입되었습니다. Microsoft는 이 배지를 전 세계에서 극소수의 파트너에게만 부여하는데, 이들은 업무 환경에서 클라우드 플랫폼과 보안을 거쳐 AI 애플리케이션 자체에 이르기까지 Microsoft 스택 전반에서 AI 프로젝트를 지속 가능하게 제공하며, 이러한 역량을 실제 현장에서 입증한 파트너입니다. DACH 지역에서 이 그룹에 속하는 기업은 손에 꼽을 정도이며, 우리는 그중 하나입니다.","/posts/2026-06-26-frontier-partner","posts/2026-06-26-frontier-partner",[1522,1604,1549],"Microsoft Partner",{"id":1606,"title":1607,"author":1608,"cta":494,"description":1609,"hideInRecent":484,"layout":1078,"meta":1610,"moment":1611,"path":1615,"stem":1616,"tags":1617,"webcast":484},"content_ko/posts/2026-06-09-vair-run.md","좋은 뜻을 위한 160킬로미터",[1397],"일요일 아침 8시 30분, 마인강 변 Holbeinsteg. 통일된 NinjaCat 셔츠를 입은 열한 명의 동료가 Frankfurter Runden을 준비하고 있습니다. 비, 번개, 천둥까지 함께였습니다. 좋은 뜻을 위해 달린다는 것은, 궂은 날씨에도 러닝화 끈을 조여 매기에 충분한 동기였습니다.",{"lang":1080,"date":1611,"categories":1612,"blogtitlepic":1613,"customExcerpt":1614},"2026-06-08",[1516],"frankfurter-runden.png","열한 명의 동료, 16바퀴, 160킬로미터, 뇌우 한 차례 그리고 시상대 입상: glueckkanja는 Frankfurter Runden 2026에 참가했고, 달린 한 바퀴마다 Offenbach에 포용적인 스포츠·문화 공원을 짓고 있는 VAIR e.V.에 기부했습니다.","/posts/2026-06-09-vair-run","posts/2026-06-09-vair-run",[1618,1588,1619],"Top Arbeitgeber","Soziales Engagement",{"id":1621,"title":1622,"author":1623,"cta":494,"description":1624,"hideInRecent":484,"layout":1078,"meta":1625,"moment":1626,"path":1630,"stem":1631,"tags":1632,"webcast":484},"content_ko/posts/2026-04-10-incident-to-intelligence.md","알려지지 않은 AMOS 스틸러의 해부: 알림에서 몇 시간 만에 면역까지",[1378],"우리 SOC에서 알림이 발생하면 시계가 돌아가기 시작합니다. 해당 고객뿐 아니라 우리 보호 아래에 있는 모든 조직에 대해서 말입니다. 현대 위협 환경에서 가장 위험한 순간은 인텔리전스 갭(Intelligence Gap), 즉 새로운 멀웨어 변종이 처음 사용된 시점과 업계가 그것을 알게 되는 날 사이의 시간 창입니다.",{"lang":1080,"date":1626,"categories":1627,"blogtitlepic":1628,"customExcerpt":1629},"2026-04-10",[1469],"head-amos-stealer.png","지금까지 문서화되지 않은 AMOS 스틸러 변종이 macOS 엔드포인트를 침해했습니다. 알려진 해시도, 공개 데이터베이스의 C2 데이터도 없었습니다. 우리 SOC는 여섯 겹의 난독화 계층을 해체하고 모든 지표를 추출한 뒤, 업계가 이 샘플을 미처 보기도 전에 몇 시간 만에 모든 SOC 고객에게 보호를 배포했습니다.","/posts/2026-04-10-incident-to-intelligence","posts/2026-04-10-incident-to-intelligence",[1633,1634,1635,1636,1637],"Threat Intelligence","Incident Response","macOS Security","Malware Analysis","Cyber Security Operations Center",{"id":1639,"title":1640,"author":1641,"cta":494,"description":1642,"hideInRecent":484,"layout":1078,"meta":1643,"moment":1644,"path":1647,"stem":1648,"tags":494,"webcast":484},"content_ko/posts/2026-03-21-microsoft-edge-corporate-browser.md","Edge가 유일한 Corporate Browser여야 하는 이유",[1168],"기업 환경에서 브라우저의 선택은 전략적 결정입니다. 이는 실제로 얼마나 많은 보안과 관리 부담을 갖게 되는지에 직접적인 영향을 미칩니다. Google Chrome은 오랫동안 당연한 선택지였지만, Microsoft Edge는 특히 Microsoft 365가 사용되고 관리가 Intune을 통해 이루어지는 경우 기존 스택에 직접 연결되는 브라우저로 발전했습니다.",{"lang":1080,"date":1644,"blogtitlepic":1645,"customExcerpt":1646},"2026-03-21","head-microsoft-edge-default-browser.jpg","Chrome를 진정으로 선택한 기업은 없습니다. 그저 그 자리에 있었을 뿐이며, 자체 동기화 로직과 자체 계정 관리, 자체 정책 인터페이스를 가지고 있었습니다. 반면 Microsoft Edge는 이미 가동 중인 인프라, 즉 Entra ID, Intune, Defender에 직접 연결됩니다. 이 글에서는 전환이 어떤 모습인지, Chrome을 Intune 정책으로 어떻게 랜딩 페이지로 리디렉션하는지, 그리고 두 개의 브라우저를 병행 운영하는 것을 멈추면 무엇이 사라지는지를 보여드립니다.","/posts/2026-03-21-microsoft-edge-corporate-browser","posts/2026-03-21-microsoft-edge-corporate-browser",{"id":1650,"title":1651,"author":1652,"cta":494,"description":1653,"hideInRecent":484,"layout":1078,"meta":1654,"moment":1655,"path":1659,"stem":1660,"tags":1661,"webcast":484},"content_ko/posts/2026-03-20-stryker-attack-intune-privilege.md","관리자 계정 하나면 충분했습니다.",[1272],"2026년 3월 11일 수요일. 79개국의 Stryker 사무실 직원들은 컴퓨터를 켰고, 화면이 비어 있는 것을 발견했습니다. 로그인 화면은 하나의 로고로 대체되어 있었습니다. 회사 노트북, 업무용 휴대폰, 그리고 회사의 BYOD 프로그램에 등록된 개인 기기까지 모두 동시에, 하룻밤 사이에 초기화되었습니다. 랜섬웨어도, 멀웨어 시그니처도, 엔드포인트 탐지 도구가 잡아낼 수 있었던 그 어떤 것도 없었습니다.",{"lang":1080,"date":1655,"categories":1656,"blogtitlepic":1657,"customExcerpt":1658},"2026-03-20",[1469],"head-stryker.jpg","2026년 3월 11일, Handala는 79개국의 기기를 초기화했고, 그 모든 것에 필요했던 것은 침해된 Intune 관리자 계정 하나였습니다. 멀웨어도, 익스플로잇도 없었고, 오직 정당한 관리 도구가 그 소유자를 겨냥했을 뿐입니다. 무슨 일이 있었는지, 왜 그것이 통했는지, 그리고 어떤 두 가지 아키텍처 허점을 막아야 하는지 살펴봅니다.","/posts/2026-03-20-stryker-attack-intune-privilege","posts/2026-03-20-stryker-attack-intune-privilege",[71,1505,1506],{"id":1663,"title":1664,"author":1665,"cta":494,"description":1666,"hideInRecent":484,"layout":1078,"meta":1667,"moment":1668,"path":1672,"stem":1673,"tags":1674,"webcast":484},"content_ko/posts/2026-03-16-ai-agent-hackathon.md","여섯 개의 Agent. 4주. 실제 운영.",[1299],"여러분의 IT 부서는 Agent가 몇 분이면 처리할 수 있는 작업에 매주 몇 시간을 쓰고 있습니까?",{"lang":1080,"date":1668,"categories":1669,"blogtitlepic":1670,"customExcerpt":1671},"2026-03-16",[1516],"head-ai-agent-hackathon.jpg","여섯 개 기업, 4주간의 구축 단계, 여섯 개의 실제로 작동하는 AI Agent. 이것이 첫 번째 glueckkanja AI Agent 해커톤이었습니다. Kiekert, Dr. Oetker, Eckes-Granini, igefa 그리고 lila logistik은 Copilot Studio에서 오늘날 실제로 운영되는 Agent를 구축했습니다. 그 과정에서 무엇이 만들어졌고 이 포맷이 어떻게 작동하는지 소개합니다.","/posts/2026-03-16-ai-agent-hackathon","posts/2026-03-16-ai-agent-hackathon",[1549,1675,1676,1677],"Copilot Studio","Hackathon","AI Agents",{"Karsten Kleinschmidt":1679,"Fritz Zurhorst":1680,"Nadine Klein":1681,"Jan Geisbauer":1682,"Carolin Kanja":1686,"Anna Ulbricht":1687,"Annette Brauns":1688,"Pascal Asch":1689,"Steffen Schwerdtfeger":1690},{"display_name":1137,"avatar":1138,"permalink":1139,"twitter":1140,"linkedin":1141,"imageOffsetTop":1142,"imageOffsetLeft":1143},{"display_name":1111,"avatar":1112,"permalink":1113,"linkedin":1114,"imageOffsetTop":1115},{"display_name":1131,"avatar":1132,"permalink":1133,"twitter":1134,"linkedin":1135,"imageOffsetTop":1115},{"display_name":1272,"avatar":1273,"permalink":1274,"twitter":1275,"linkedin":1275,"imageOffsetTop":1115,"socials":1683},[1684,1685],{"text":1278,"href":1279},{"text":1281,"href":1282},{"display_name":1299,"avatar":1300,"permalink":1301,"twitter":1302,"linkedin":1303},{"display_name":1390,"avatar":1391,"permalink":1392,"linkedin":1393,"imageOffsetTop":1394,"imageOffsetLeft":1395},{"display_name":1397,"avatar":1398,"permalink":1399,"linkedin":1400,"imageOffsetTop":1401,"imageOffsetLeft":1142},{"display_name":1378,"avatar":1379,"permalink":1380,"linkedin":1381,"imageOffsetTop":1215},{"display_name":1168,"avatar":1169,"permalink":1170,"linkedin":1171,"twitter":1172,"imageOffsetTop":1173,"imageOffsetLeft":1174},{"id":1106,"extension":1107,"meta":1692,"stem":8,"__hash__":1459},{},1791383940117]