the process of tightening security on a system.

learn more… | top users | synonyms

2
votes
1answer
586 views

PowerShell's Module logging, a few questions

I'm looking for some more information concerning the white paper which goes into some detail over PowerShell's Module logging. Specifically, once this is enabled, are the default cmdlets logged? For ...
3
votes
0answers
53 views

ASCII Armoring in a little endian system

With regard to the question: How does ASCII-Armoring help to prevent buffer-overflow attacks?: How the armored region prevents the attack? If the most significant byte of the return address is 0x00 ...
3
votes
0answers
138 views

Hardening a Chromebook

I have a Chromebook I routinely use for things like e-banking and other things where a security breach would be catastrophic. I've read it is a very secure OS by nature due to its small surface area ...
2
votes
0answers
54 views

What measures beyond those for general software, if any, should be taken when preparing a work PC for lunchtime or after-hour gaming?

In some companies (not the one I work for), there are certain groups of employees that have permission of management to play certain games on their office network after the work day has ended. This ...
2
votes
0answers
868 views

Using “Security Compliance Manager” to audit a Windows system

I found a few posts which suggest using Microsoft SCM (Security Compliance Manager) to audit the security of Microsoft software solutions: Windows security policy analysis tool How do I apply a ...
1
vote
0answers
92 views

DLL preloading attack - are IAT libraries affected too?

I'm about to distribute a dll library (there's also a linux version) to my users but I'm afraid of dll preloading attacks (i.e. someone substituting its malicious dll to get called by mine and gain ...
0
votes
0answers
51 views

Applocker rules Publisher vs hash

I'm interested in deploying application white-listing for a large scale environment by using the Windows Server built-in AppLocker mechanism. There is no Internet connection to the environment. My ...
0
votes
0answers
55 views

Is it possible to lock guest VMs (or processes) to sticks of physical RAM to prevent row hammer attacks?

I was wondering if it is possible through some means to isolate processes (or preferably guest VMs) to physical sticks of RAM. This would be to prevent row hammer like attacks from using physical ...