KiberXavfsizlik Asoslari

⚠️ Shaxsga doir ma’lumotlar himoyasi kuchaytiriladi 📝 Qonun (O‘RQ–1125-son, 26.03.2026 y.) bilan “Shaxsga doir ma’lumotlar to‘g‘risida”gi Qonunga o‘zgartirish va qo‘shimchalar kiritildi. ❗️ Kiritilgan o‘zgartirishlarga ko‘ra, quyidagi shaxsga doir ma’lumotlar O‘zbekiston hududida saqlanishi shart: ✔️shaxslarning biometrik ma’lumotlari; ✔️ shaxslarning genetik ma’lumotlari; ✔️ O‘zbekiston hududida faoliyat olib borayotgan telekommunikatsiyalar operatorlaridagi ularning xizmatlaridan foydalanuvchi jismoniy shaxslarning ma’lumotlari.

⚡️ Yuqorida ko‘rsatilmagan shaxsga doir ma’lumotlar quyidagi shartlardan biri bajarilganda, O‘zbekistondan tashqarida saqlanishi va ishlov berilishi mumkin: ➡️chet davlatni shaxsga doir ma’lumotlarning bir xil himoya qilinishini ta’minlovchi davlat sifatida tan olish; ➡️operator tomonidan vakolatli davlat organi tasdiqlaydigan talablarga javob beruvchi standart shartnomaviy shartlar yoki majburiy korporativ qoidalar qabul qilinishi va ularga rioya etilishi; ➡️ro‘yxati vakolatli davlat organi tomonidan tasdiqlanadigan shaxsga doir ma’lumotlarni boshqarish va saqlash sohasidagi xalqaro standartlarga operator tomonidan rioya etilishi.

➡️ Qonun rasmiy e’lon qilingan kundan e’tiboran kuchga kiradi.

Bizni ijtimoiy tarmoqlarda kuzatib boring!

Web-sayt| Aloqa nazorati| Facebook| Instagram‌‌|Youtube|LinkedIn

#CYBERFACT ⚠️Ishonch — endi yetarli emas. Tekshiruv zarur. Bugun firibgarlar sun’iy intellekt orqali siz tanigan insonlarning yuzi va ovozidan foydalanmoqda. Video realdek ko‘rinadi, ovoz ham tanish… lekin bu — yolg‘on bo‘lishi mumkin. Hech qachon faqat video asosida pul yubormang. 📞Avval qo‘ng‘iroq qiling ✅Shaxsan tasdiqlang 🧠Har doim shubha bilan yondoshing Unutmang: bugun ishonch ham deepfake bo‘lishi mumkin. 🌐Website 🚀Telegram 📷Instagram 🔵Facebook 🎬Youtube 🎰Linkedin

⚡️Kiberxavfsizlik sohasi bo‘yicha xalqaro sertifikat olishga tayyorlaydigan kurslar yo‘lga qo‘yildi Ma’lumotlarga ko‘ra, respublikamizda kiberxavfsizlik sohasidagi mutaxassislarning bilim va ko‘nikmalarini yanada mustahkamlash, ularni xalqaro sertifikatsiyalarga tayyorlash maqsadida Toshkent shahridagi Inha universitetida quyidagi kurslar tashkil etildi: “CompTIA Security+” xalqaro sertifikatsiya kursi 2 oy davom etib, unda quyidagi yo‘nalishlar bo‘yicha bilimlar beriladi: ✅ tahdidlarni aniqlash ✅ zaifliklarni baholash va xavfsizlikni mustahkamlash ✅ hodisalarga javob berish (Incident Response) ✅ kriptografiya va ma’lumotlarni himoyalash “EC-Council Certified Ethical Hacker (CEH)” xalqaro sertifikatsiya kursi 3 oy davom etib, unda quyidagi yo‘nalishlar qamrab olinadi: ✅ “Ethical Hacking” va “Penetration”Testing ✅ tarmoq va tizim zaifliklarini aniqlash ✅ malware va kiberhujumlarni tahlil qilish ✅ amaliy laboratoriya ishlari va “CTF” mashg‘ulotlari Mazkur kurslar tinglovchilarni xalqaro sertifikat olishga tayyorlaydi. Mashg‘ulotlar xalqaro sertifikatga ega, amaliy tajribali mutaxassislar tomonidan olib boriladi hamda o‘quv jarayoni asosan amaliyotga yo‘naltirilgan bo‘ladi. 📞Batafsil ma’lumot: +998 (90) 806-21-81 🌐Website | 📝Telegram | 🌐Facebook | 📹Youtube | 📱Instagram

🚀 Laboratoriya darslari boshlanmoqda! 👨‍💻 Tarmoq texnologiyalarini *0 dan professional darajagacha* o‘rganmoqchimisiz? Siz uchun maxsus amaliy laboratoriya kurslari tayyor! 📚 Darslar tarkibi: 🔹 IOS asoslari va navigatsiya 🔹 IP manzillash va subnetting 🔹 VLAN va Switching konfiguratsiyasi 🔹 Routing (Static, OSPF, Inter-VLAN) 🔹 NAT, ACL, STP, EtherChannel 🔹 Tarmoq xavfsizligi (SSH, Firewall, VPN) 🔹 DHCP, DNS, NTP xizmatlari 🔹 Va yana ko‘plab real amaliy mashg‘ulotlar! 📊 Darajalar: 🟢 Boshlang‘ich → 🟡 O‘rta → 🔴 Ilg‘or → ⚫️ Professional 🎯 Har bir dars — bu nazariya emas, real konfiguratsiya va hands-on tajriba! 🔥 MAXSUS TAKLIF! Ushbu kursga qatnashish imkoniyati faqat Cyber University talabalari uchun ochiq! 💡 Agar siz kelajakda kuchli Network Engineer bo‘lishni istasangiz — bu imkoniyatni qo‘ldan boy bermang! ⏳ Joylar soni cheklangan! Batafsil 👉 https://t.me/cisco_ccna_laboratory_uz

💻 PowerShell skriptlari orqali kompyuter haqida ma’lumot yig‘ish 🧠 Administratorlar va kiberxavfsizlik mutaxassislari uchun foydali buyruqlar! --- 🖥 Asosiy tizim ma’lumotlari: 🧾 Desktop (ish stoli) haqida ma’lumot:

Get-CimInstance -ClassName Win32_Desktop

🧬 BIOS haqida ma’lumot:

Get-CimInstance -ClassName Win32_BIOS

⚡️ Protsessor (CPU) ma’lumotlari:

Get-CimInstance -ClassName Win32_Processor | Select-Object -ExcludeProperty "CIM*"

🖥 Tizim turi (32/64-bit):

Get-CimInstance -ClassName Win32_ComputerSystem | Select-Object -Property SystemType

🏭 Kompyuter ishlab chiqaruvchisi (OEM):

Get-CimInstance -ClassName Win32_ComputerSystem

--- 🔄 Yangilanishlar va OS haqida: 📦 O‘rnatilgan yangilanishlar (patchlar):

Get-CimInstance -ClassName Win32_QuickFixEngineering

🪟 Operatsion tizim versiyasi:

Get-CimInstance -ClassName Win32_OperatingSystem |
  Select-Object BuildNumber,BuildType,OSType,ServicePackMajorVersion,ServicePackMinorVersion

--- 👥 Foydalanuvchilar haqida: 📊 Umumiy foydalanuvchi ma’lumotlari:

Get-CimInstance -ClassName Win32_OperatingSystem |
    Select-Object NumberOfLicensedUsers, NumberOfUsers, RegisteredUser

🔍 User bilan bog‘liq barcha maydonlar:

Get-CimInstance -ClassName Win32_OperatingSystem | Select-Object *user*

👤 Hozir tizimga kirgan foydalanuvchi:

Get-CimInstance -ClassName Win32_ComputerSystem -Property UserName

--- 💽 Disk va xotira: 📀 Diskdagi bo‘sh joy:

Get-CimInstance -ClassName Win32_LogicalDisk -Filter "DriveType=3"

📊 Umumiy disk statistikasi:

Get-CimInstance -ClassName Win32_LogicalDisk -Filter "DriveType=3" |
    Measure-Object FreeSpace,Size -Sum |
    Select-Object Property,Sum

--- ⏰ Qo‘shimcha tizim ma’lumotlari: 🕒 Mahalliy vaqt:

Get-CimInstance -ClassName Win32_LocalTime

🔐 Login sessiyalari:

Get-CimInstance -ClassName Win32_LogonSession

--- ⚙️ Xizmatlar (Services): 📋 Xizmatlar holati:

Get-CimInstance -ClassName Win32_Service |
    Select-Object Status,Name,DisplayName

📊 Jadval ko‘rinishida:

Get-CimInstance -ClassName Win32_Service |
    Format-Table Status, Name, DisplayName -AutoSize -Wrap

--- 🚀 Ushbu buyruqlar orqali siz tizimni audit qilish, monitoring va diagnostika ishlarini samarali bajara olasiz! 📌 Kanalimizni kuzatib boring: 👉 https://t.me/cybersecurity_essentials #PowerShell #CyberSecurity #Windows #IT #KiberXavfsizlik 🔐

💻 Windows boshqaruv paneli (Control Panel) buyruqlari 🧠 Ushbu buyruqlar orqali tizim sozlamalariga tez va oson kirishingiz mumkin! --- 🛠 Asosiy buyruqlar: ⚙️ appwiz.cpl — Dasturlarni boshqarish (Programma va funksiyalar) 🖥 control — Boshqaruv paneli 🧰 control admintools — Administrator vositalari 🎨 control color — Rang va ko‘rinish sozlamalari 🖼 control desktop — Displey sozlamalari 📁 control folders — Papka sozlamalari ⌨️ control keyboard — Klaviatura sozlamalari 🖱 control mouse — Sichqoncha sozlamalari 🌐 control netconnections — Tarmoq sozlamalari 🖨 control printers — Printerlar ⏰ control schedtasks — Vazifalar rejalashtiruvchisi 🔄 control update — Windows yangilanishi 👤 control userpasswords — Administrator akkaunti sozlamalari 👥 control userpasswords2 — Foydalanuvchilar akkauntlari --- 🧩 Qo‘shimcha tizim sozlamalari: 🖥 desk.cpl — Ekran ruxsati 🔌 devmgmt.msc — Qurilmalar menejeri 🔥 firewall.cpl — Windows xavfsizlik devori 🌍 inetcpl.cpl — Internet sozlamalari 🌏 intl.cpl — Mintaqaviy sozlamalar 🔊 mmsys.cpl — Ovoz sozlamalari 🌐 ncpa.cpl — Tarmoq adapterlari 👤 netplwiz — Foydalanuvchi yaratish 🔋 powercfg.cpl — Energiya sozlamalari 💻 sysdm.cpl — Tizim xususiyatlari 🕒 timedate.cpl — Sana va vaqt 🧑‍🦽 utilman — Maxsus imkoniyatlar menejeri 🛡 wscui.cpl — Xavfsizlik markazi --- 🧠 Administrator vositalari: 🖥 compmgmt.msc — Kompyuterni boshqarish 🧹 defrag — Diskni defragmentatsiya qilish ⚙️ dcomcnfg — Komponentlar xizmatlari 🔌 devmgmt.msc — Qurilmalarni boshqarish 💽 diskmgmt.msc — Disk bo‘limlari menejeri 📀 diskpart — Disk boshqaruvi (CLI) 📊 eventvwr.msc — Hodisalar ko‘ruvchisi 📂 fsmgmt.msc — Umumiy papkalar 🛠 gpedit.msc — Guruh siyosati muharriri 👥 lusrmgr.msc — Lokal foydalanuvchilar va guruhlar 📈 perfmon.msc — Tizim monitoringi 🔐 rekeywiz — Fayllarni shifrlash --- 🚀 Ushbu buyruqlarni Win + R oynasiga yozib ishlatishingiz mumkin! 📌 Kanalimizni kuzatib boring: 👉 https://t.me/cybersecurity_essentials #Windows #CyberSecurity #IT #Lifehack #KiberXavfsizlik 🔐

🛠 Linux’da matn bilan ishlash uchun foydali komandalar Saqlab qo‘ying 📌 — SysAdmin va DevOps ishida doim kerak bo‘ladigan “must-have” buyruqlar. ⸻ 🔹 Kontentni ko‘rish va bazaviy operatsiyalar cat -n file1 # satrlar raqami bilan chiqarish cat example.txt | awk 'NR%2==1' # faqat toq (odd) satrlar echo a b c | awk '{print $1,$3}' # 1 va 3 ustun echo a b c | awk '{print $1}' # faqat 1-ustun ⸻ 🔹 Fayllarni taqqoslash comm -3 file1 file2 # farqli satrlar comm -1 file1 file2 # file1 dagilarni chiqarma comm -2 file1 file2 # file2 dagilarni chiqarma sdiff file1 file2 # yonma-yon taqqoslash ⸻ 🔍 grep — qidiruv va filtratsiya grep [0-9] /var/log/messages # raqamli satrlar grep ^Aug /var/log/messages # "Aug" bilan boshlanuvchi grep Aug /var/log/messages # ichida "Aug" bor grep Aug -R /var/log/* # rekursiv qidiruv ⸻ 🔗 paste — fayllarni birlashtirish paste -d '+' file1 file2 # "+" bilan birlashtirish paste file1 file2 # jadval ko‘rinishida ⸻ ✂️ sed — stream editor (power tool) sed 's/string1/string2/g' example.txt # replace sed '/ *#/d; /^$/d' example.txt # komment va bo‘sh satrlarni o‘chirish sed -e '1d' example.txt # 1-satrni o‘chirish sed -n '/string1/p' example.txt # filter sed -e 's/ *$//' example.txt # oxirgi bo‘sh joylarni o‘chirish sed -n '5p;5q' example.txt # faqat 5-satr sed -n '2,5p' example.txt # 2-5 satrlar sed -e 's/00*/0/g' example.txt # bir nechta nol → bitta nol ⸻ 📊 sort & uniq — tartiblash va deduplikatsiya sort file1 file2 # sort sort file1 file2 | uniq # unique sort file1 file2 | uniq -u # faqat unique sort file1 file2 | uniq -d # faqat duplicate ⸻ 🔤 Registr transformatsiyasi echo 'word' | tr '[:lower:]' '[:upper:]' # lower → upper ⸻ 🎯 Xulosa Ushbu komandalar: ✔ Log analysis ✔ Data parsing ✔ Troubleshooting ✔ Automation pipeline’lar uchun asos Linux CLI’da samarali ishlash — bu tezlik va aniqlik degani. ⸻ 📢 Amaliy Linux va kiberxavfsizlik kontenti: 👉 https://t.me/cybersecurity_essentials #Linux #CLI #awk #sed #grep #SysAdmin #DevOps #kiberxavfsizlik #KiberxavfsizlikAsoslari

📌 cat buyrug‘i bilan fayllarni birlashtirish (concatenate) cat — Linux/UNIX tizimlarida matn fayllar bilan ishlash uchun bazaviy utilita. Eng muhim funksiyalaridan biri — bir nechta faylni yagona faylga birlashtirish. --- 🧩 Asosiy foydalanish ssenariylari 1️⃣ Bir nechta faylni bitta faylga birlashtirish

cat file1.txt file2.txt > result.txt

📌 Natija: result.txt fayliga ikkala fayl kontenti yoziladi ⚠️ Agar fayl mavjud bo‘lsa — ustidan yoziladi (overwrite) --- 2️⃣ Faylga qo‘shib yozish (append)

cat file1.txt >> result.txt

📌 Natija: file1.txt kontenti result.txt oxiriga qo‘shiladi ✔️ Mavjud ma’lumot saqlanadi --- 3️⃣ Katalogdagi barcha fayllarni birlashtirish

cat *.txt > all_files_combined.txt

📌 Natija: joriy katalogdagi barcha .txt fayllar bitta faylga jamlanadi --- 💼 Amaliy qo‘llanilishi 📄 Log fayllarni birlashtirish

cat /var/log/syslog.1 /var/log/syslog.2 > syslogs_combined.log

⚙️ Konfiguratsiya fayllari

cat config_part1.conf config_part2.conf > full_config.conf

💾 Backup yoki DB dump

cat backup_part1.sql backup_part2.sql > full_backup.sql

--- 🔍 Natijani tekshirish

cat result.txt

📖 Post-page ko‘rish:

less result.txt

--- ⚠️ Muhim eslatma ✔️ > — overwrite (eski fayl o‘chadi) ✔️ >> — append (ma’lumot qo‘shiladi) ✔️ Katta hajmli fayllar uchun cat o‘rniga less yoki tail ishlatish tavsiya etiladi --- 🎯 Xulosa cat — bu: ✔️ Tezkor fayl birlashtirish ✔️ Log va konfiguratsiyalar bilan ishlash ✔️ Data pipeline’larda oddiy, lekin samarali vosita Minimal buyruq — maksimal foyda. --- 📢 Linux va kiberxavfsizlik bo‘yicha amaliy kontent: 👉 [https://t.me/cybersecurity_essentials](https://t.me/cybersecurity_essentials) #Linux #CLI #cat #SysAdmin #DevOps #ITasoslari #kiberxavfsizlik #KiberxavfsizlikAsoslari

📌 Grafana + Loki — markazlashgan log monitoring (cheat sheet) Grafana + Loki — bu loglarni yig‘ish (Loki) va vizualizatsiya qilish (Grafana) uchun kuchli observability stack. DevOps va Security monitoring uchun optimal yechim. ⸻ 🚀 1. Loki o‘rnatish va sozlash 📦 O‘rnatish

mkdir -p /etc/loki /var/lib/loki curl -O -L https://github.com/grafana/loki chmod +x loki-linux-amd64 mv loki-linux-amd64 /usr/local/bin/loki

⸻ ⚙️ Config (misol)

auth_enabled: false server: http_listen_port: 3100 storage_config: boltdb_shipper: active_index_directory: /var/lib/loki/index cache_location: /var/lib/loki/cache shared_store: filesystem

⸻ ▶️ Ishga tushirish

loki -config.file=/etc/loki/config.yaml

⸻ 🛠 2. Promtail (log collector) 📦 O‘rnatish

curl -O -L https://github.com/grafana/loki chmod +x promtail-linux-amd64 mv promtail-linux-amd64 /usr/local/bin/promtail

⸻ ⚙️ Config

server: http_listen_port: 9080 clients: - url: http://localhost:3100/loki/api/v1/push scrape_configs: - job_name: system_logs static_configs: - targets: - localhost labels: job: "varlogs" host: "server-1" __path__: /var/log/*.log

⸻ ▶️ Ishga tushirish

promtail -config.file=/etc/promtail/config.yaml

⸻ 🎨 3. Grafana sozlash 📥 O‘rnatish (Ubuntu)

sudo apt-get install -y grafana

▶️ Ishga tushirish

sudo systemctl start grafana-server sudo systemctl enable grafana-server

⸻ 🌐 Loki ulash 1️⃣ http://localhost:3000 ga kiring 2️⃣ Configuration → Data Sources 3️⃣ Loki qo‘shing: • URL: http://localhost:3100 • Access: Server 4️⃣ Save & Test ⸻ 🔍 4. LogQL (Loki query) 📝 Basic query

{job="varlogs"} | json

🔎 Filtrlash

{job="varlogs"} |= "error" {job="varlogs"} != "debug"

📊 Aggregation

rate({job="varlogs"}[5m]) count_over_time({job="varlogs"}[10m]) sum by (level) (count_over_time({job="varlogs"}[10m]))

⸻ 🛠 5. Monitoring va troubleshooting 🔄 Restart

systemctl restart loki systemctl restart promtail systemctl restart grafana-server

📂 Loglar

journalctl -u loki -f journalctl -u promtail -f journalctl -u grafana-server -f

⸻ 🧹 Tozalash

rm -rf /var/lib/loki/* rm -rf /var/lib/promtail/*

⸻ 📡 API tekshirish

curl -s http://localhost:3100/ready

✔️ Javob: ready ⸻ 🎯 Xulosa Grafana + Loki stack: ✔️ Markazlashgan log monitoring ✔️ Real-time observability ✔️ Incident Response tezlashadi ✔️ Security monitoring uchun mos To‘g‘ri sozlangan log tizimi — bu SIEM’ning soddalashtirilgan, ammo samarali alternativasi. ⸻ 📢 DevOps va kiberxavfsizlik bo‘yicha amaliy kontent: 👉 https://t.me/cybersecurity_essentials #Grafana #Loki #DevOps #Monitoring #Logs #CyberSecurity #SIEM #kiberxavfsizlik #KiberxavfsizlikAsoslari

📦 Docker va konteynerlar bilan ishlash Docker — bu containerization platformasi bo‘lib, ilovalarni izolyatsiyalangan muhitda tez va standart tarzda deploy qilish imkonini beradi. SysAdmin va DevOps uchun bazaviy instrument hisoblanadi. ⸻ ⚙️ 1. Docker o‘rnatish 🟦 Ubuntu / Debian: sudo apt update && sudo apt install -y docker.io sudo systemctl enable --now docker 🟥 CentOS / RHEL: sudo yum install -y docker sudo systemctl enable --now docker 📌 Tekshirish: docker --version ⸻ 🚀 2. Asosiy Docker komandalar ▶️ 2.1 Container ishga tushirish docker run -d --name my_container nginx Parametrlar: • -d — background • --name — container nomi • nginx — image ⸻ 📋 2.2 Containerlar ro‘yxati docker ps # faqat ishlayotganlar docker ps -a # barcha containerlar ⸻ ⛔ 2.3 To‘xtatish va o‘chirish docker stop my_container docker rm my_container ⸻ 🧩 2.4 Container ichida buyruq bajarish docker exec -it my_container bash ⸻ 🧱 3. Docker Compose (multi-container) Docker Compose — bir nechta containerlarni YAML orqali boshqarish. 📥 3.1 O‘rnatish sudo curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose sudo chmod +x /usr/local/bin/docker-compose ⸻ 📄 3.2 docker-compose.yml misol version: '3' services: web: image: nginx ports: - "80:80" db: image: mysql environment: MYSQL_ROOT_PASSWORD: rootpass ⸻ ▶️ 3.3 Boshqarish docker-compose up -d docker-compose down docker-compose logs -f ⸻ 🖼 4. Docker Images bilan ishlash docker images # lokal image'lar docker search ubuntu # qidirish docker pull ubuntu # yuklab olish 🏗 Custom image yaratish Dockerfile: FROM ubuntu:latest RUN apt update && apt install -y nginx CMD ["nginx", "-g", "daemon off;"] docker build -t my_nginx . ⸻ 💾 5. Volumes (ma’lumot saqlash) 📦 5.1 Volume yaratish docker volume create my_volume docker volume ls ⸻ 🔗 5.2 Containerga ulash docker run -d -v my_volume:/data --name my_container nginx 📌 Volume — container o‘chirilsa ham ma’lumotni saqlab qoladi. ⸻ 🎯 Xulosa Docker — bu: ✔ Tez deploy (CI/CD ready) ✔ Izolyatsiya va xavfsizlik ✔ Portability (har qanday muhitda ishlaydi) ✔ Microservices arxitekturasining asosi To‘g‘ri ishlatilgan Docker — infratuzilma boshqaruvini sezilarli soddalashtiradi. ⸻ 📢 DevOps va kiberxavfsizlik bo‘yicha amaliy kontent: 👉 https://t.me/cybersecurity_essentials #Docker #DevOps #Containers #SysAdmin #Cloud #CyberSecurity #kiberxavfsizlik #KiberxavfsizlikAsoslari

🚀 CCNA 200-301 — Mustaqil tayyorgarlik kursi Tarmoq muhandisligi sohasiga kirish yoki professional darajaga chiqishni xohlaysizmi? Ushbu kurs sizga Cisco CCNA (200-301) imtihoniga tizimli va amaliy yondashuv bilan tayyorlanish imkonini beradi. --- 📚 Kurs tarkibi ✔️ Network Fundamentals — tarmoq asoslari ✔️ Network Access — switching va VLAN’lar ✔️ IP Connectivity — routing va marshrutlash ✔️ Security Fundamentals — tarmoq xavfsizligi ✔️ Automation & Programmability — zamonaviy network automation --- 🎯 Kurs maqsadi 🔹 CCNA imtihoniga puxta tayyorgarlik 🔹 Real lab muhitida amaliy ko‘nikmalar 🔹 Enterprise darajadagi tarmoq tushunchalari --- 💼 Kimlar uchun? ✔️ Boshlovchilar (IT / Networking) ✔️ System Administratorlar ✔️ Network Engineer bo‘lishni istaganlar ✔️ CCNA sertifikatini olishni rejalayotganlar --- 📌 Nima uchun muhim? Bugungi kunda tarmoq infratuzilmasi — har qanday IT tizimning asosi. CCNA — bu network engineering uchun entry-level emas, balki mustahkam foundation. ✔️ https://t.me/cisco_ccna_200_301_uz ✔️ https://t.me/cisco_ccna_200_301_uz ✔️ https://t.me/cisco_ccna_200_301_uz ✔️ https://t.me/cisco_ccna_200_301_uz ✔️ https://t.me/cisco_ccna_200_301_uz --- 📢 Batafsil va amaliy darslar: 👉 https://t.me/cybersecurity_essentials #CCNA #Cisco #Networking #NetworkEngineer #ITcareer #CyberSecurity #kiberxavfsizlik #KiberxavfsizlikAsoslari

⚡️ Linux’da RAM avtomatik tozalash (Drop Cache) Serverda RAM yuklamasi oshganda tizim sekinlashishi mumkin. Bunday holatda kernel cache’ni tozalash orqali vaqtinchalik resurslarni bo‘shatish mumkin. ⸻ 🛠 Skript (RAM cache tozalash) #!/bin/bash echo "Xotira tozalanmoqda..." sync && echo 3 > /proc/sys/vm/drop_caches echo "Tayyor! Bo‘sh RAM oshdi." ⸻ 📌 Qanday ishlatiladi 1️⃣ Skriptni faylga saqlang: nano clear_ram.sh 2️⃣ Execute huquq bering: chmod +x clear_ram.sh 3️⃣ Root sifatida ishga tushiring: sudo ./clear_ram.sh ⸻ 🕒 Cron orqali avtomatlashtirish Crontab ochish: sudo crontab -e Har soatda ishga tushirish: 0 * * * * /path/to/clear_ram.sh ⸻ ⚠️ Muhim izoh • drop_caches — bu page cache, dentries va inode cache ni tozalaydi • Bu RAM “muammosi”ni hal qilmaydi, faqat vaqtinchalik yengillik beradi • Linux odatda RAM’ni optimal boshqaradi — keraksiz qo‘lda aralashuv tavsiya etilmaydi ⸻ 🎯 Qachon ishlatish kerak? ✔️ Test / lab muhitda ✔️ Cache bilan bog‘liq diagnostika ✔️ Benchmark oldidan ❌ Production’da doimiy ishlatish tavsiya etilmaydi (performancega salbiy ta’sir qilishi mumkin) ⸻ 🧠 Strategik yondashuv Agar RAM doim to‘lib qolayotgan bo‘lsa: ✔️ Memory leak tekshirish ✔️ Servis optimizatsiyasi ✔️ Swap sozlamalari ✔️ Qo‘shimcha RAM ⸻ 📢 Amaliy Linux va kiberxavfsizlik: 👉 https://t.me/cybersecurity_essentials #Linux #RAM #Performance #SysAdmin #DevOps #CyberSecurity #kiberxavfsizlik #KiberxavfsizlikAsoslari

📌 Linux tizimida loglar va monitoring Linux’da loglar — bu tizim holati, xavfsizlik va troubleshooting uchun asosiy ma’lumot manbai. To‘g‘ri monitoring — incidentlarni erta aniqlash imkonini beradi. ⸻ 📜 journalctl — systemd loglari 🔹 Real-time kuzatish: journalctl -f 🔹 Muayyan servis: journalctl -u nginx 🔹 So‘nggi 1 soat: journalctl --since "1 hour ago" 🔹 Oldingi boot: journalctl -b -1 💡 Filtrlash: journalctl -p err # faqat xatoliklar journalctl -k # kernel loglari ⸻ 🔄 logrotate — loglarni boshqarish 📍 Config fayl: /etc/logrotate.conf 📌 Misol: /var/log/nginx/*.log { weekly rotate 4 compress missingok notifempty } 🔹 Test: logrotate -d /etc/logrotate.conf 🔹 Majburiy ishga tushirish: logrotate -f /etc/logrotate.conf ⸻ 📡 syslog (rsyslog, syslog-ng) Tizim loglarini faylga yozish va remote serverga yuborish imkonini beradi. 📍 Asosiy fayllar: /var/log/syslog # umumiy log /var/log/auth.log # autentifikatsiya /var/log/kern.log # kernel 📍 Remote log yuborish (rsyslog): *.* @192.168.1.100:514 🔹 Restart: systemctl restart rsyslog ⸻ ⚙️ dmesg — kernel loglari 🔹 Xatoliklarni ko‘rish: dmesg | grep -i error 🔹 Vaqt bilan: dmesg -T 🔹 Strukturali chiqish: dmesg -H 🔹 Filtr: dmesg --level=err,warn ⸻ 📊 Log monitoring 🔹 Real-time kuzatish: tail -f /var/log/syslog 🔹 Xatolik qidirish: grep -i "error" /var/log/syslog 🔹 Eng faol log manbalari: awk '{print $5}' /var/log/syslog | sort | uniq -c | sort -nr ⸻ 🤖 Avtomatlashtirish va tahlil ✔ fail2ban — brute-force himoya ✔ logwatch — kunlik hisobot ✔ Grafana + Loki — markazlashgan log monitoring ⸻ 🎯 Xulosa Loglar — bu: ✔ Tizim diagnostikasi ✔ Xavfsizlik monitoringi ✔ Incident Response uchun asosiy manba Loglarni muntazam kuzatish — bu har qanday SysAdmin va Security Engineer uchun majburiy amaliyot. ⸻ 📢 Amaliy Linux va kiberxavfsizlik: 👉 https://t.me/cybersecurity_essentials #Linux #Logs #Monitoring #SysAdmin #CyberSecurity #DevOps #infosec #kiberxavfsizlik #KiberxavfsizlikAsoslari

Suniy Intelekt O'zbeklarga qarshi! (Russ tilida)

📦 Zaxira nusxa olish va tiklash (Backup & Recovery) Ma’lumotlarni yo‘qotish — bu texnik muammo emas, balki biznes risk. To‘g‘ri tashkil etilgan backup strategiya — tizim barqarorligining asosiy elementi. ⸻ 🧰 Asosiy vositalar • tar — arxivlash • rsync — sinxronizatsiya va inkremental backup • cron — avtomatlashtirish • BorgBackup — shifrlangan va deduplikatsiyalangan backup ⸻ 📁 tar — Arxivlash 📦 Arxiv yaratish: tar -czvf backup.tar.gz /path/to/dir 🔍 Tarkibini ko‘rish: tar -tzf backup.tar.gz ♻️ Tiklash: tar -xzvf backup.tar.gz -C /restore/path 📝 Flaglar: • -c — yaratish • -x — chiqarish • -z — gzip siqish • -v — verbose • -f — fayl nomi ⸻ 🔁 rsync — Sinxronizatsiya 📤 Lokal backup: rsync -avh /source/ /backup/ 🌍 Remote server (SSH orqali): rsync -avz -e ssh /data/ user@host:/backup/ 📅 Sana bilan backup: rsync -av --progress /data/ /backup/$(date +%F)/ 🛡 Flaglar: • -a — archive mode • -v — verbose • -z — siqish • --delete — ortiqcha fayllarni o‘chiradi ⸻ ⏰ cron — Avtomatlashtirish 🛠 Crontab ochish: crontab -e 🕒 Har kuni 02:00 backup: 0 2 * * * /usr/bin/rsync -a /data/ /backup/ 📌 Format: min soat kun oy hafta_kuni buyruq 👀 Loglarni ko‘rish: grep CRON /var/log/syslog ⸻ 🧠 BorgBackup — Advanced backup 📦 Repository yaratish: borg init --encryption=repokey /backup/borg-repo 🧱 Backup: borg create /backup/borg-repo::backup-$(date +%F) /data 🔍 Tekshirish: borg list /backup/borg-repo ♻️ Tiklash: borg extract /backup/borg-repo::backup-2026-01-01 🧹 Eski backup’larni tozalash: borg prune -v --keep-daily=7 --keep-weekly=4 --keep-monthly=6 /backup/borg-repo 🔐 Afzalliklari: ✔ Shifrlash (default) ✔ Deduplikatsiya ✔ Siqish ✔ Remote backup (SSH orqali) ⸻ ✅ Best Practices ✔ Bir nechta nusxa (local + remote) ✔ Muhim ma’lumotlar uchun shifrlash ✔ Tiklashni muntazam test qilish ✔ Cron orqali avtomatlashtirish ✔ Cloud backup (rclone, borg, rsync + VPS) ⸻ 🎯 Xulosa Backup — bu opsiya emas, bu majburiy xavfsizlik nazorati. To‘g‘ri tashkil etilgan backup strategiya: • Ma’lumot yo‘qotilishini oldini oladi • Incident Recovery vaqtini qisqartiradi • Biznes uzluksizligini ta’minlaydi ⸻ 📢 Amaliy SysAdmin va kiberxavfsizlik: 👉 https://t.me/cybersecurity_essentials #Backup #Linux #SysAdmin #DataProtection #CyberSecurity #DisasterRecovery #kiberxavfsizlik #KiberxavfsizlikAsoslari

🔐 Fail2Ban — serverlarni brute-force hujumlardan himoya qilish Fail2Ban — serverlarni brute-force va ruxsatsiz kirish urinishlaridan himoya qiluvchi utilita bo‘lib, shubhali IP manzillarni vaqtincha bloklaydi. ⸻ ⚙️ 1. Fail2Ban o‘rnatish Debian/Ubuntu: sudo apt update && sudo apt install fail2ban -y CentOS/RHEL: sudo yum install epel-release -y sudo yum install fail2ban -y Arch Linux: sudo pacman -S fail2ban ⸻ 🔧 2. Servisni boshqarish Ishga tushirish va autostart: sudo systemctl start fail2ban sudo systemctl enable fail2ban Restart va status: sudo systemctl restart fail2ban sudo systemctl status fail2ban ⸻ 🛠 3. Konfiguratsiya Asosiy config fayl: /etc/fail2ban/jail.conf 📌 Tavsiya: lokal nusxa yarating sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local sudo nano /etc/fail2ban/jail.local 🔑 Muhim parametrlar: [DEFAULT] bantime = 10m findtime = 10m maxretry = 5 ignoreip = 127.0.0.1/8 ⸻ 🔍 4. Filter sozlamalari Filterlar joylashuvi: /etc/fail2ban/filter.d/ SSH uchun misol: [Definition] failregex = ^%(__prefix_line)sFailed password for .* from <HOST> port \d+ ssh2 ignoreregex = ⸻ 🔐 5. SSH uchun jail sozlash [sshd] enabled = true port = ssh filter = sshd logpath = /var/log/auth.log maxretry = 3 bantime = 1h ⸻ 🔄 6. Ishlashini tekshirish sudo systemctl restart fail2ban sudo fail2ban-client status SSH jail: sudo fail2ban-client status sshd ⸻ 🚫 7. IP blokdan chiqarish sudo fail2ban-client status sshd sudo fail2ban-client set sshd unbanip 192.168.1.100 ⸻ 📊 8. Log va monitoring sudo journalctl -u fail2ban --no-pager sudo tail -f /var/log/fail2ban.log ⸻ ⚡ 9. Foydali komandalar IP bloklash: sudo fail2ban-client set sshd banip 192.168.1.200 Whitelist: ignoreip = 127.0.0.1/8 192.168.1.100 Barcha banlarni olib tashlash: sudo fail2ban-client set sshd unban --all ⸻ 🔄 10. Avto ishga tushirish sudo systemctl enable fail2ban ⸻ 🧱 11. UFW bilan integratsiya (Ubuntu) [sshd] enabled = true backend = auto port = ssh filter = sshd banaction = ufw sudo systemctl restart fail2ban ⸻ 🎯 Xulosa Fail2Ban — bu: ✔ Brute-force hujumlardan real-time himoya ✔ Avtomatik IP bloklash mexanizmi ✔ Server xavfsizligini sezilarli oshiruvchi vosita To‘g‘ri sozlangan Fail2Ban — bu har qanday Linux server uchun baseline security control hisoblanadi. ⸻ 📢 Amaliy kiberxavfsizlik va server boshqaruvi: 👉 https://t.me/cybersecurity_essentials #Fail2Ban #LinuxSecurity #CyberSecurity #SysAdmin #ServerSecurity #infosec #kiberxavfsizlik #KiberxavfsizlikAsoslari

🔐 Linux tizimida huquqlar (permissions). 2-qism Linux’da standart rwx modeli yetarli bo‘lmagan holatlarda kengaytirilgan boshqaruv mexanizmlari qo‘llaniladi. Bu — enterprise darajadagi xavfsizlik va access control’ning muhim qismi. --- 🔏 5. Kengaytirilgan ACL (Access Control List) ACL — bu fine-grained access control mexanizmi bo‘lib, alohida foydalanuvchi va guruhlar uchun aniq huquqlar belgilash imkonini beradi. 📍 ACL ni tekshirish

getfacl file.txt

📍 Foydalanuvchiga huquq berish

setfacl -m u:username:rw file.txt

📍 Huquqni olib tashlash

setfacl -x u:username file.txt

📍 Default ACL (katalog uchun)

setfacl -m d:u:username:rw directory/

📌 Natija: yangi fayllar avtomatik ravishda shu huquqlarni meros qilib oladi. --- ⚙️ 6. umask (Default security policy) umask — yangi yaratilayotgan fayl va kataloglar uchun default permission policy. 📍 Tekshirish

umask

📍 O‘rnatish

umask 022   # fayl: 644, katalog: 755
umask 077   # fayl: 600, katalog: 700

--- 📊 Hisoblash logikasi 📌 Formula: Fayl: 666 – umask Katalog: 777 – umask 🔢 Misol: umask 022 → 644 (rw-r--r--) umask 077 → 600 (rw-------) --- 🛠 Operativ boshqaruv komandalar

ls -l                  # permission ko‘rish
stat file.txt          # kengaytirilgan metadata
chmod 750 file         # huquq o‘zgartirish
chown user:group file  # owner/group o‘zgartirish
setfacl -m u:user:rw file  # ACL qo‘llash

--- 💡 Reference (documentation)

man chmod
man chown
man setfacl
man umask

--- 🎯 Xulosa ACL va umask — bu: ✔️ Granular access control ✔️ Multi-user muhitda xavfsizlikni oshirish ✔️ Compliance va audit talablariga moslashuv To‘g‘ri sozlangan permission siyosati — tizim xavfsizligining asosiy qatlamidir. --- 📢 Amaliy Linux va kiberxavfsizlik kontenti: 👉 https://t.me/cybersecurity_essentials #Linux #Permissions #ACL #CyberSecurity #SysAdmin #LinuxSecurity #infosec #KiberxavfsizlikAsoslari

🔐 Linux tizimida huquqlar (permissions). 1-qism Linux’da fayl va kataloglarga kirish nazorati — tizim xavfsizligining asosiy elementi. To‘g‘ri sozlangan permission’lar ruxsatsiz kirish va ma’lumot buzilishining oldini oladi. --- 📌 1. Asosiy kirish huquqlari Har bir obyekt quyidagilarga ega: egasi (owner), guruh (group) va boshqalar (others) 🔢 Huquqlar: r (4) — o‘qish w (2) — yozish x (1) — bajarish 📄 Format:

-rwxr-xr--  1 user group 1234 Feb 27 10:00 file.txt

🔍 Tahlil: - → fayl turi (d katalog, l link) rwx → egasi r-x → guruh r-- → boshqalar --- ⚙️ 2. Huquqlarni o‘zgartirish — chmod 📍 Simvolli usul:

chmod u+x file.txt   # egasiga execute qo‘shish
chmod g-w file.txt   # guruhdan write olib tashlash
chmod o=r file.txt   # boshqalarga faqat read
chmod a+x script.sh  # hammaga execute

📍 Raqamli (octal) usul: r = 4, w = 2, x = 1

chmod 755 script.sh  # rwxr-xr-x
chmod 644 file.txt   # rw-r--r--

--- 🏷 3. Egasini o‘zgartirish — chown

chown user file.txt
chown user:group file.txt
chown :group file.txt
chown -R user:group dir/

📌 Rekursiv (-R) — katalog ichidagi barcha fayllarga qo‘llanadi. --- 🎭 4. Maxsus bitlar 🏆 SUID (Set User ID) Fayl egasi nomidan ishlaydi (root-level utilitalar uchun muhim)

chmod u+s /usr/bin/passwd
-rwsr-xr-x

--- 🏅 SGID (Set Group ID) Faylda: guruh huquqlari bilan ishlaydi Katalogda: yangi fayllar guruhni meros oladi

chmod g+s directory/
drwxr-sr-x

--- 📌 Sticky Bit Umumiy kataloglarda fayl o‘chirishni cheklaydi (/tmp kabi)

chmod +t /tmp
drwxrwxrwt

--- 🎯 Xulosa Linux permission modeli: ✔️ Minimal huquq prinsipi (Least Privilege) ✔️ Multi-user xavfsizlik arxitekturasi ✔️ Fayl darajasida access control To‘g‘ri sozlanmagan permission — bu real xavfsizlik zaifligi. --- 📢 Amaliy Linux va kiberxavfsizlik darslari: 👉 https://t.me/cybersecurity_essentials #Linux #Permissions #CyberSecurity #SysAdmin #LinuxSecurity #kiberxavfsizlik #infosec #KiberxavfsizlikAsoslari

🧰 Linux’da paketlarni o‘rnatish va boshqarish Linux tizimida paket menejerlari — dasturlarni o‘rnatish, yangilash va boshqarishning asosiy vositasidir. Har bir distributiv o‘z ekotizimiga ega. ⸻ 📦 Asosiy paket menejerlari • apt — Debian / Ubuntu • yum / dnf — CentOS, RHEL, Fedora • pacman — Arch Linux • snap / flatpak — cross-platform (sandboxed) ⸻ 🟦 apt (Debian / Ubuntu)

apt update # paketlar ro‘yxatini yangilash apt upgrade # tizimni yangilash apt install <paket> # o‘rnatish apt remove <paket> # o‘chirish (config qoladi) apt purge <paket> # to‘liq o‘chirish apt autoremove # keraksiz bog‘liqliklarni o‘chirish apt search <nom> # qidirish apt show <paket> # paket haqida info

⸻ 🟨 yum (CentOS 7 va eski versiyalar)

yum check-update yum update yum install <paket> yum remove <paket> yum info <paket> yum list installed yum search <so‘z>

⸻ 🟥 dnf (Fedora, CentOS 8+)

dnf check-update dnf upgrade dnf install <paket> dnf remove <paket> dnf info <paket> dnf search <nom> dnf list installed

⸻ 🟩 pacman (Arch Linux)

pacman -Syu # tizimni to‘liq yangilash pacman -S <paket> # o‘rnatish pacman -R <paket> # o‘chirish pacman -Rs <paket> # dependency bilan o‘chirish pacman -Ss <qidiruv> # qidirish pacman -Qi <paket> # info pacman -Qdt # orphan paketlar

⸻ 🌀 snap (Sandboxed)

snap find <paket> snap install <paket> snap list snap refresh snap remove <paket>

⸻ 🔵 flatpak (Snap alternativasi)

flatpak search <nom> flatpak install flathub <nom> flatpak run <id> flatpak list flatpak update flatpak uninstall <nom>

⸻ 📌 Muhim izoh ✔ apt / dnf / pacman → tizim paketlari uchun ✔ snap / flatpak → izolyatsiyalangan (sandbox) ilovalar ✔ Konfliktlar xavfini kamaytiradi ✔ Desktop ilovalar uchun qulay ⸻ 🎯 Xulosa Paket menejerlari — bu: ✔ Tizim boshqaruvi ✔ Xavfsiz yangilanishlar ✔ Dependency management ✔ DevOps va SysAdmin uchun asosiy vosita To‘g‘ri tanlangan paket menejeri — tizim barqarorligi va xavfsizligiga bevosita ta’sir qiladi. ⸻ 📢 Amaliy Linux va kiberxavfsizlik kontenti: 👉 https://t.me/cybersecurity_essentials #Linux #PackageManager #SysAdmin #DevOps #CyberSecurity #apt #dnf #pacman #kiberxavfsizlik #KiberxavfsizlikAsoslari

Kanalimizda "Linux xaftasi"! Xar kuni Linux foydalanuvchilari uchun yangi mavzu.