Questions tagged [microsoft]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3 votes
1 answer
71 views

Why did Microsoft publish the CPassword AES key ca. 2012?

As outlined in Security Bulletin MS14-025, Microsoft acknowledges the way credentials had been stored in the group policy field "CPassword" is insecure and is not to be trusted any more. ...
user avatar
0 votes
0 answers
14 views

Feasible dotnet version [migrated]

I am having a stateful service which is using target framework as "netcoreapp3.1". And This service will be calling Some test projects and other dependencies. We need to add these projects ...
user avatar
0 votes
1 answer
132 views

KB Patches not taking effect for CVE-2022-26832: .NET Framework Denial of Service Vulnerability

Rapid 7 has found CVE-2022-26832 on a server running Windows Server 2012 R2 Standard Edition with a French langauge pack installed. The following is listed as the proof why Rapid 7 thinks the ...
user avatar
0 votes
0 answers
18 views

Change default classification label (Azure Information Protection) in Microsoft Office (Outlook, Word, Excel) by user

We have Azure Information Protection (AIP) configured for our organisation, we have 4 labels defined (public, internal, confidential, secret). The default label set for the organization is to "...
user avatar
0 votes
0 answers
13 views

Microsoft Sentinel API for search a query

Is there any API in MS Sentinel to search a query, Workspace | where something == "something2" | where this "that" I tried using msticpy, any alternative that can be done using a ...
user avatar
0 votes
1 answer
51 views

TGS Ticket in Kerberoasting

In kerberoasting , User request service ticket for any service with registered SPN then use the ticket to crack service password. But in kerberoses authentication process , KRB_TGS_REQ request is ...
user avatar
0 votes
0 answers
72 views

Microsoft Pluton Security Chip - Specs and API?

Microsoft introduced a new security chip dubbed Pluton that is ought to become mandatory for systems running Windows (11 and forward). AMD has already implemented or is about to implement the chip as ...
user avatar
  • 191
2 votes
2 answers
5k views

Microsoft Defender flagged Surfshark.exe as "Misleading:Win32/Lodi"

Can this be safely ignored? VirusTotal shows that Microsoft is the only security vendor that flagged this file as malicious. I did not modify my Surfshark installation in any way, except for an update ...
user avatar
0 votes
1 answer
63 views

Can 2k (or in the spirit of the new year, 2k22) bugs be security risks?

Microsoft Exchange was recently affected by an issue involving the way they stored timestamps (overflow). Could this, and similar bugs, be exploited by an attacker?
user avatar
  • 1,187
0 votes
1 answer
201 views

Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]

Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
user avatar
1 vote
1 answer
130 views

Does .NET Framework have a bounty program?

The Microsoft .NET Bounty Program states that "Vulnerabilities in the .NET Framework, or any ASP.NET framework running on .NET Framework (Webforms or MVC)" is out of scope. Is .NET Framework ...
user avatar
  • 153
0 votes
1 answer
303 views

How can a Microsoft "unsuccessful sign-in" trigger a 2FA request?

I was certain I'd find a question asking this, but a search didn't return any results. I have 2FA enabled on my Microsoft account, which requires me to approve all sign-ins using the Microsoft ...
user avatar
0 votes
0 answers
125 views

Using SMIME with Azure Information Protection and OME

As far as I know, SMIME encryption is more user-friendly than AIP, but there is the need to know the recipients public key (well, and even the need for them to have a public key). I would like to ...
user avatar
1 vote
0 answers
82 views

What is Threat Profile is Microsoft addressing with the MSAL URI format?

Applications built for MSAL 1.0 and MSAL 2.0 have a default application URI of MSAL://GUIDHere/AppName This is in contrast with what other IDP's are doing. Can anyone explain the benefits or drawbacks ...
user avatar
0 votes
2 answers
183 views

Avoiding having emails being traced

I am writing a novel and the main character sent anonymous emails using Outlook and a VPN on an iPhone to disclose information about the mafia. Now, the police are investigating it. How can he avoid ...
user avatar
1 vote
0 answers
549 views

Is it possible to enumerate Microsoft Access database using sqlmap?

I'm trying to enumerate a Microsoft Access database using sqlmap, in particular I run this command: sqlmap -r http.txt --risk 2 --dump-all Anyway it seems is not retrieving a single information. Am I ...
user avatar
  • 487
8 votes
1 answer
287 views

Is this Windows local code execution bug also a security vulnerability?

I stumbled on a Windows bug leading to code execution. I believe it should be categorized as a vulnerability but Microsoft does not recognize it as such. I would like to read other opinions. ...
user avatar
1 vote
2 answers
275 views

Can I be sure a Word document is safe if it doesn't have macros

I am aware that MS Word documents can be potentially dangerous due to the executable macros contained within them. But for a particular document, I have opened the macros and can see there are none. ...
user avatar
  • 111
0 votes
0 answers
96 views

Non-malicious root causes for multiple failed logon in windows domain

While monitoring SIEM alerts, I saw that there was more than 200 failed logon for a user to several hosts in the domain. Obviously, it was triggered as a brute-force attempt. Assuming it was not an ...
user avatar
  • 21
1 vote
0 answers
240 views

How do you check if someone faked the last modified date or not? [closed]

I think one of my students faked the modified date of his word file. He's last modified date was exactly the deadline of 13:00:00 (even the seconds are zero). How do i figure this out?? I want to know ...
user avatar
0 votes
0 answers
251 views

Is Microsoft CVE-2020-1045 a credible threat?

Microsoft released CVE-2020-1045 in September 2020. A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser ...
user avatar
0 votes
1 answer
285 views

Does fingerprint scanning on Microsoft Authenticator increase security?

tl;dr: I have switched phone and operating system: Android 8.0 --> Android 10.0. Phone restored from backup, so all the remaining is the same except for Microsoft Authenticator that now requires ...
user avatar
  • 3,297
3 votes
1 answer
332 views

Does Kali installed through WSL respect my privacy?

When installing Kali from Microsoft Store, I wasn't prompted with a user agreement license. Is Microsoft able to monitor my applications? How safe is it to use WSL in that context? (From privacy ...
user avatar
0 votes
0 answers
76 views

Visual Studio Code on Linux - Privacy risk? [duplicate]

I'm a fan of Visual Studio, and recently installed VSC on my Linux Mint. However recently I did a deep-dive on Richard Stallman's site reading about just how evil and depraved all the big tech ...
user avatar
0 votes
1 answer
241 views

Why http microsoft connection in netstat check?

I checked established connections with "netstat" command in command prompt, and I found that there are some connections with ip's of microsoft (I checked ip online) that have http (and not ...
user avatar
  • 3
4 votes
0 answers
256 views

Where can I find a list of all government agencies with CAs in PKI root stores?

Is there a source that monitors popular root stores for CAs controlled by government agencies? There are several "root stores" that maintain a list of trusted root CAs. These root stores are ...
user avatar
2 votes
1 answer
160 views

How to contact Microsoft regarding security flaw? [closed]

Here I see: If you believe you have found a security vulnerability that meets Microsoft's definition of a security vulnerability, please submit the report to MSRC at https://msrc.microsoft.com/create-...
user avatar
  • 1,214
0 votes
1 answer
112 views

Who (Designer or User) Should be Resposible for the Correct/Secure Usage of a Tool Intended for Developers/Admins? [closed]

There is a healthy debate around a series of stack overflow posts that refer to the "RunAs" command. Specifically the discussion is in reference to design decision that the folks at ...
user avatar
26 votes
2 answers
10k views

What's the point of Microsoft Account 2FA if it still lets me log in using password instead?

I have a Microsoft Account linked to a Microsoft Authenticator app for 2FA purposes. Every time I log in, it first sends me the Authenticator request, but I can always click "Other ways to sign ...
user avatar
  • 411
1 vote
2 answers
199 views

How can I be attacked by opening a corrupt MS Office document?

When opening a corrupt Microsoft Office document, I get a prompt that says something along the lines of: Excel [or Word/PowerPoint/etc] has found unreadable content on 'filename.xslx'. Do you wish ...
user avatar
2 votes
1 answer
113 views

How to tell if Microsoft office has been patched for a vulnerability?

The NIST database holds records for Microsoft Office vulnerabilities, however it only lists the application (i.e. Word 2016) and the service pack. Microsoft release hotfixes outside of service packs, ...
user avatar
  • 181
6 votes
2 answers
3k views

After changing Microsoft password, one can still login to previously authenticated Windows devices with old password indefinitely. Why?

Has anyone else noticed that if you are using a Microsoft account for Windows, after changing your password, the old password can still be used indefinitely on previously authenticated devices? I have ...
user avatar
  • 173
2 votes
1 answer
18k views

Microsoft DS vulnerability?

I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files. How do they transfer files with Microsoft DS? Do they need an exploit to ...
user avatar
1 vote
2 answers
9k views

Microsoft account security alert - Is this legit? [closed]

I've just received two emails in a row stating that "We detected something unusual about a recent sign-in for the Microsoft account" and "someone else might have accessed the Microsoft account..." (...
user avatar
1 vote
1 answer
1k views

How to disable/block Microsoft Store on Windows 10 Pro by firewall?

I want to block Microsoft Store on Windows 10 pro in a corporate environment. Having read relevant articles about this matter and tested on my machine, I see that Windows 10 Pro does not support this ...
user avatar
  • 103
0 votes
1 answer
11k views

Can my employer see my browsing history with work account on my personal device

I was using Edge on my personal device at home browsing stuff and realised I was logged in on Bing.com with my Microsoft work account. I cleared my browser's browsing history and also Bing's browsing ...
user avatar
0 votes
1 answer
347 views

security concerns when configuring Windows 10 to automatically log into a Microsoft account-linked user account

I have just configured my Windows 10 desktop PC at home to automatically log into my Windows 10 user account that my Microsoft account is linked to on startup. My desktop is in my bedroom upstairs and ...
user avatar
  • 7,313
0 votes
0 answers
97 views

Security and Microsoft Teams / Microsoft OneDrive / Share Point Online?

As a user of these products, how concerned do I have to be about who can see what I place in the system? I don't know who pays the bill and thus has access to everything in there, and I don't know ...
user avatar
  • 1,247
0 votes
0 answers
91 views

critical files to be monitored by file integrity monitoring solutions in active directory servers

We are implementing file integrity solution on Microsoft active directory servers, I need to know the critical paths(files and folders and registry keys) that need to be monitored for any change or ...
user avatar
0 votes
1 answer
369 views

Microsoft Outlook Vulnerability CVE-2018-8587 - How likely is exploitation?

I found an interesting blog post A Deep Analysis of the Microsoft Outlook Vulnerability CVE-2018-8587 about Microsoft Outlook heap buffer overflow vulnerability where is described how Microsoft ...
user avatar
3 votes
0 answers
105 views

Good book detailing the security aspects of Microsoft Active Directory [closed]

I am attending training later this summer related to AD pentesting. As such, I wanted to ask for book recommendations which detail (in full or in part) the security aspects of Active Directory. The ...
user avatar
  • 169
-1 votes
1 answer
244 views

Can wifi admin view video downloaded from personal Outlook cloud onto personal laptop?

Can company wifi admin view a video I downloaded to a personal computer from my outside microsoft outlook account accessed through Chrome? I have a personal university Microsoft account https, which I ...
user avatar
52 votes
10 answers
19k views

Replacing Windows 7 security updates with anti-virus?

Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here. I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
user avatar
0 votes
1 answer
418 views

In a SQL server, passwords are hashed in chinese. What algorithm it might be using?

While performing the following query, passwords are displayed in Chinese. I'm wondering what hashing algorithm is being used here in order for me to carry out a brute-force attack.
user avatar
0 votes
0 answers
121 views

When sharing confidential information, which is more secure share via Outlook vs store on Sharepoint then provide access?

I'm trying to figure out what is good practice and what is more secure for my small team. I wanted to set a standard or governance on how to share confidential information within our team. One person ...
user avatar
  • 101
0 votes
1 answer
64 views

Extensions and Modules and Packages, Oh My! [closed]

How do you know if extensions (e.g., Code, Chrome, Firefox), modules (e.g., PowerShell), or packages (e.g., Python, R) are not malicious? How can you control or monitor that in an environment? Stuff ...
user avatar
  • 125
1 vote
1 answer
138 views

Does the file encryption of Microsoft Office guarantee integrity?

I stumbled upon Microsoft Office's feature of file encryption. For storing sensitive data in the cloud, e.g. DropBox, this sounds like a nice feature. Reading that the encryption is AES-128 in CBC ...
user avatar
  • 113
0 votes
1 answer
70 views

Restricting cipher suite on MSIE

I'm investigating significant performance problems with MSIE using TLS connections. I am trying to restrict the available algorithms to isolate the problem / see if there is valid workaround. To do ...
user avatar
  • 18.3k
3 votes
1 answer
476 views

Is there evidence to proof that Windows is spying us ? Are the anti-spy programs works and are they trustable?

Are there any evidences that Windows is spying the users ? Let's focus on Windows 10. I am almost sure it does. The things like telemetry and Cortana... However I never saw a proof like university ...
user avatar
  • 91
0 votes
1 answer
705 views

Mimikatz /rc4 argument for pass-the-ticket?

I'm studying how pass-the-ticket works using Mimikatz, i.e., forged Silver and Golden Kerberos tickets. The command usually takes the form (Golden tickets): kerberos::golden /sid:SID /domain:DOMAIN /...
user avatar
  • 1,087