Tag Info

Hot answers tagged

13

This is normal and expected behavior for windows system. The IP you mentioned resolves to sinwns2012412.wns.windows.com. The Windows Push Notification Services (WNS) enables third-party developers to send toast, tile, badge, and raw updates from their own cloud service. This provides a mechanism to deliver new updates to your users in a power-efficient and ...


3

I am aware of the following features: Windows Hello - A new authentication system, which will replace passwords with a combination of biometrics and public key crypto. This will eliminate "pass the hash" attacks. Private keys will be stored on the TPM. Biometric authentication to the local device can use fingerprint or facial scanning. The facial scanning ...


2

You can not securely use encrypted virtual machines without full disk encryption on the host. While the virtual machine is running, the host stores memory chunks, log data, configurations, and loads of other files on disk, leaving permanent forensic trail of a live decrypted virtual machine. File and project names will almost certainly be recoverable. If ...


2

You have a few options, and it'd probably be best to do at least the first two: Encrypt your host operating system's drive using BitLocker or doxbox. When installing your guest operating system, do the same thing inside the guest. VirtualBox and other VM hosts provide the option to encrypt the virtual drive. All drive contents are encrypted before written ...


2

Law #3: If a bad guy has unrestricted physical access to your computer, it's not your computer anymore. (https://technet.microsoft.com/en-us/library/hh278941.aspx) This is definitely a realistic threat. The question is whether you need to worry about it. If you can't guarantee that someone will not have unfettered access to your PC then you should be ...


1

As @kjetil-limkjær points out, Powershell version 4 and up includes the Get-FileHash cmdlet. powershell get-filehash -algorithm sha1 <file_to_check> Use doskey to make a persistent alias that's easier to remember. doskey sha256sum=powershell get-filehash -algorithm sha256 "$1" doskey sha1sum=powershell get-filehash -algorithm sha1 "$1" doskey ...


1

No, it isn't secure. Signing a application does only provide traceability and unmodifiability - the created application can be traced back to the person who signed it, and the application cannot be modified without invalidating the signature. Anyone who has the Money and possibility to go through the process of getting a code signing certificate will get ...


1

You can use a Simple Batch File. Open Notepad and copy/paste the script below into a blank document. Save the file as BLOCKALL.BAT. Now copy that file to the same directory as the EXEs you want to block and double click it. It will add outbound rules to advanced Windows Firewall settings blocking all EXEs in that folder and sub-folders as well. I tested ...


1

I am sorry if I am missing something simple in your question. Why not just store the image on an encrypted drive? You could store the image or the entire VirtualBox folder on the encrypted disk so that way you need the key to be able to access it.


1

Without a prior preparation (which I understand is the case described by you) the only viable option that comes to my mind is to check the last opened/recent files in all users programs that you can access. This may include menu entries, pop down lists, or even registry entries. Since you mentioned MS Office documents, this might come in handy: ...


1

Well, AFAIK there are two options that do not require activation, nor specialized tools: Open C:\Users\user name\AppData\Roaming\Microsoft\Windows\Recent Items, and see if the file is listed there. Open regedit.exe, and navigate to the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs section. You will see values, structured ...


1

Any application can easily submit any DNS resolution request. There are numerous libraries available and programmers can choose to perform the resolutions whichever way they want. For example, in Python it's one line of code (maybe two) import dns.resolver answers = dns.resolver.query('dnspython.org', 'MX') To link an actual application to the UDP ...


1

Firstly I would like to explain differences between Viruses, Trojans and Malware. Malware - is the short form of Malicious Software. It is basically a software written to cause damage or infiltrate computer systems without the owner informed consent. It is general term used to represent various forms of intrusive, hostile and annoying code. Virus - is a ...


1

You shouldn't use the recovery partition even if it's signed. I would personally be more worried about the manufacturer than the person who's selling it to me (and if the seller is really malicious, he would've embedded some evil hardware keyloggers rather than relying on a partition I may never ever use). To strictly answer your question, I believe the ...


1

As a general rule of thumb, running other services on security-related devices such as firewalls should be kept to a minimum. In other words, a firewall should ideally only be a firewall, and nothing else. The more services you run, the more likely one of them will contain a vulnerability that can allow an attacker to take over the machine. If that machine ...



Only top voted, non community-wiki answers of a minimum length are eligible