Questions tagged [microsoft]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Is Microsoft Forms adequately secure to collect personal health information? [closed]

I want to make a survey on a website using Microsoft Forms. Patients would input personal health information into this form, so I want it to be secure. The Microsoft website indicates that Microsoft ...
1
vote
1answer
50 views

How can I be attacked by opening a corrupt MS Office document?

When opening a corrupt Microsoft Office document, I get a prompt that says something along the lines of: Excel [or Word/PowerPoint/etc] has found unreadable content on 'filename.xslx'. Do you wish ...
6
votes
2answers
170 views

After changing Microsoft password, one can still login to previously authenticated Windows devices with old password indefinitely. Why?

Has anyone else noticed that if you are using a Microsoft account for Windows, after changing your password, the old password can still be used indefinitely on previously authenticated devices? I have ...
2
votes
1answer
56 views

How to tell if Microsoft office has been patched for a vulnerability?

The NIST database holds records for Microsoft Office vulnerabilities, however it only lists the application (i.e. Word 2016) and the service pack. Microsoft release hotfixes outside of service packs, ...
53
votes
10answers
19k views

Replacing Windows 7 security updates with anti-virus?

Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here. I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
-1
votes
1answer
285 views

Microsoft DS vulnerability?

I heard that Microsoft DS is a port that is commonly used by hackers to hack computers due to its ability to transfer files. How do they transfer files with Microsoft DS? Do they need an exploit to ...
0
votes
0answers
41 views

Is Microsoft Personal Vault safe like zero knowledge?

Personal vault allows to set a two factor. I chose Google Authenicator and saved the recovery code on a piece of paper. This means Microsoft does not have the two factor. Does this make Personal Vault ...
1
vote
1answer
208 views

How to disable/block Microsoft Store on Windows 10 Pro by firewall?

I want to block Microsoft Store on Windows 10 pro in a corporate environment. Having read relevant articles about this matter and tested on my machine, I see that Windows 10 Pro does not support this ...
1
vote
2answers
664 views

Microsoft account security alert - Is this legit? [closed]

I've just received two emails in a row stating that "We detected something unusual about a recent sign-in for the Microsoft account" and "someone else might have accessed the Microsoft account..." (...
0
votes
0answers
215 views

Can my employer see my browsing history with work account on my personal device

I was using Edge on my personal device at home browsing stuff and realised I was logged in on Bing.com with my Microsoft work account. I cleared my browser's browsing history and also Bing's browsing ...
0
votes
1answer
57 views

security concerns when configuring Windows 10 to automatically log into a Microsoft account-linked user account

I have just configured my Windows 10 desktop PC at home to automatically log into my Windows 10 user account that my Microsoft account is linked to on startup. My desktop is in my bedroom upstairs and ...
2
votes
3answers
3k views

Restrict Microsoft Network Policy Server (NPS) to only trust client certificates from a given CA?

I'm working on an install of a Microsoft Network Policy Sever (NPS) / RADIUS server for controlling access to corporate Wi-Fi using 802.1x / WPA2-Enterprise - using client certificates for ...
3
votes
1answer
8k views

What is the point of Microsofts 30 day security update waiting period

If you want to update your security info (such as a password). You need to verify your ID with your phone or another email. If you don't have any connected to you account (or forgot them), you can add ...
0
votes
0answers
50 views

Security and Microsoft Teams / Microsoft OneDrive / Share Point Online?

As a user of these products, how concerned do I have to be about who can see what I place in the system? I don't know who pays the bill and thus has access to everything in there, and I don't know ...
0
votes
0answers
27 views

critical files to be monitored by file integrity monitoring solutions in active directory servers

We are implementing file integrity solution on Microsoft active directory servers, I need to know the critical paths(files and folders and registry keys) that need to be monitored for any change or ...
0
votes
0answers
38 views

Telerik Script not working correctly?

I found that a website is using a version of telerik web ui that may be vulnerable to cve-2017-9248. However when i use the python script with command python script.py -k https://www.website.com/...
0
votes
0answers
146 views

Does Windows CNG Keystore support exporting a key or keypair in ciphertext?

As Windows CNG Keystorage offers API to export key(pair)s: SECURITY_STATUS NCryptExportKey( /* The handle of the key(pair) to export */ NCRYPT_KEY_HANDLE hKey, /* The handle of a key to encrypt ...
4
votes
2answers
6k views

Windows 7 consent.exe attempting to access the internet

Looking at Firewall logs, I see that consent.exe, which is responsible for the Windows 7 UAC UI, attempts to connect to the internet. I have verified the file is a genuine executable provided by ...
0
votes
1answer
215 views

Microsoft Outlook Vulnerability CVE-2018-8587 - How likely is exploitation?

I found an interesting blog post A Deep Analysis of the Microsoft Outlook Vulnerability CVE-2018-8587 about Microsoft Outlook heap buffer overflow vulnerability where is described how Microsoft ...
4
votes
2answers
1k views

Is there an equivalent of Control Flow Guard for Linux?

Introduced by Microsoft in recent versions of Windows and its compilers, Control Flow Guard is a useful defence in depth measure in the mitigation of return-oriented programming exploits. My question ...
0
votes
0answers
96 views

Where are NTLM and LM hashes stored in a password protected microsoft presentation file

I have a password protected presentation file (MS office 2003). My assignment required me to either remove the password or find it. In my research i found out that presentation use ntlm and/or nt ...
3
votes
0answers
61 views

Good book detailing the security aspects of Microsoft Active Directory [closed]

I am attending training later this summer related to AD pentesting. As such, I wanted to ask for book recommendations which detail (in full or in part) the security aspects of Active Directory. The ...
-1
votes
1answer
106 views

Can wifi admin view video downloaded from personal Outlook cloud onto personal laptop?

Can company wifi admin view a video I downloaded to a personal computer from my outside microsoft outlook account accessed through Chrome? I have a personal university Microsoft account https, which I ...
1
vote
0answers
42 views

What is the default cipher for SSL connections in Azure for MariaDB?

According to Microsoft's Documentation, Azure should be configured to use SSL for connections. In regards to default settings, they state the following: By default, the database service should be ...
34
votes
4answers
38k views

Microsoft email servers “require remote control of Android device security features”

Just tried to set up my student email address with the default email client on my Android device. The email servers used by the university are outlook.office365.com (incoming) and smtp.office365.com (...
0
votes
1answer
111 views

In a SQL server, passwords are hashed in chinese. What algorithm it might be using?

While performing the following query, passwords are displayed in Chinese. I'm wondering what hashing algorithm is being used here in order for me to carry out a brute-force attack.
0
votes
0answers
42 views

When sharing confidential information, which is more secure share via Outlook vs store on Sharepoint then provide access?

I'm trying to figure out what is good practice and what is more secure for my small team. I wanted to set a standard or governance on how to share confidential information within our team. One person ...
1
vote
1answer
82 views

Does the file encryption of Microsoft Office guarantee integrity?

I stumbled upon Microsoft Office's feature of file encryption. For storing sensitive data in the cloud, e.g. DropBox, this sounds like a nice feature. Reading that the encryption is AES-128 in CBC ...
0
votes
1answer
28 views

Extensions and Modules and Packages, Oh My! [closed]

How do you know if extensions (e.g., Code, Chrome, Firefox), modules (e.g., PowerShell), or packages (e.g., Python, R) are not malicious? How can you control or monitor that in an environment? Stuff ...
0
votes
1answer
27 views

Restricting cipher suite on MSIE

I'm investigating significant performance problems with MSIE using TLS connections. I am trying to restrict the available algorithms to isolate the problem / see if there is valid workaround. To do ...
3
votes
1answer
240 views

Is there evidence to proof that Windows is spying us ? Are the anti-spy programs works and are they trustable?

Are there any evidences that Windows is spying the users ? Let's focus on Windows 10. I am almost sure it does. The things like telemetry and Cortana... However I never saw a proof like university ...
4
votes
2answers
144k views

Is 'account-security-noreply@accountprotection.microsoft.com' a legitimate sender of security alerts?

I have been getting emails from "account-security-noreply@accountprotection.microsoft.com" (as verified in metadata) about unusual activity. The internet has very conflicting information about if ...
0
votes
0answers
163 views

Mimikatz /rc4 argument for pass-the-ticket?

I'm studying how pass-the-ticket works using Mimikatz, i.e., forged Silver and Golden Kerberos tickets. The command usually takes the form (Golden tickets): kerberos::golden /sid:SID /domain:DOMAIN /...
1
vote
2answers
3k views

How is my microsoft account compromised?

I have had my Microsoft account ever since Hotmail boomed, and I've had the same super weak six character password up until this year, but it was when one of my google accounts got compromised a few ...
6
votes
1answer
459 views

Curious about Microsoft “Buffer Security Check” implementation

A very quick background to help you answering my questions : Learning IDA Interactive Disassembler, the old free edition (too expensive for a hobbyist) 15 year Linux Sysadmin & DBA experience ...
3
votes
2answers
8k views

Is there a RCE PoC for the CVE-2012-0002/MS12-020?

I've recently looked a bit into the MS vulnerability CVE-2012-0002/MS12-020, released in 2012. In March 2012, Symantec posted a screenshot of a supposedly RCE PoC for the vulnerability, but today I ...
4
votes
1answer
44k views

Is this email from OneDrive a phishing attack?

Today I received an email claiming that my OneDrive account is going to be deleted as it has been unused for the past two years. This is probably true. The email urges me to visit OneDrive to ...
2
votes
1answer
323 views

SMBRelay Attack - Mount Share instead of Code Execution

Is it possible to execute an SMBRelay attack that mounts a share instead of execute code? The application I am testing uses a non-administrative user but has access to several SMB shares. Only NTLMv2 ...
1
vote
1answer
443 views

What is Badlock and how does it work?

A while back there was an announcement for the disclosure of a security vulnerability named "Badlock" - including this fancy name and a logo. The disclosure date was today and I was surprised (and ...
2
votes
0answers
142 views

Extracting public key created by an UWP app in KeyCredentialManager

I know of an app that is using https://docs.microsoft.com/en-us/uwp/api/windows.security.credentials.keycredentialmanager to generate a key pair (supposedly stored in a TPM), and sequentially uses the ...
2
votes
1answer
201 views

Office 365 “ForeignRealmIndexLogonInitialAuthUsingADFSFederatedToken”

I've detected a number of illegitimate logins to Office 365 (based on Client IP). In the audit log, the operation is listed as "ForeignRealmIndexLogonInitialAuthUsingADFSFederatedToken." I'm not ...
1
vote
1answer
524 views

Importing a self-signed certificate into Windows via the Microsoft Management Console

First, I apologize if I mix my terminology up a bit in this post, I'm new to SSL. I've created a CA and used it to self-sign an SSL certificate for a server I connect to. Now I need to import the CA'...
5
votes
1answer
1k views

I ran netstat and one thing that came up was MSN bingbot, does that mean my computer is being used as part of a Microsoft botnet?

I ran netstat on my computer, and one thing that came up was msnbot-65-52-108-216. I did some research and what came up was that it's from an IP originating in Redmond, Washington and that it's likely ...
0
votes
1answer
114 views

Did Skype give me a MBR virus? [closed]

So here's the deal, I could never login on my desktop to skype for business. Since I am an microsoft 365 admin, I issued a ticket and waited for someone to call me to help me login. He remotely logged ...
2
votes
1answer
464 views

Has any exploit leveraged a Video Driver flaw in WebGL?

Microsoft delayed support for WebGL due to the fact Javascript could exploit driver weaknesses. In the years that have past, in WebGL's adoption, are there any exploits of WebGL that supports their ...
20
votes
5answers
10k views

KeePass Vs OneNote

In my personal life, I use KeePassX to generate/store all my passwords. I have seen some people use a password protected OneNote section. Does the password protected OneNote section provide a ...
0
votes
2answers
91 views

How does “Microsoft domain authentication” prevent me from using passwort variants?

I have read Sequential password updates and I am aware of a number of techniques to prevent users from using password variants. My question is, which of these techniques are actually used in user ...
5
votes
2answers
2k views

Windows Privilege Escalation system shell dies quickly

I have a user restricted shell and I used a host upnpn exploit which gives me root access to nc.exe. I am able to get a shell as SYSTEM but it dies after 30 seconds due to the service being ...
4
votes
1answer
1k views

Anniversary Update with Bitlocker Reboot without Encryption Key

I have Windows 10 Professional installed and have avoided the Anniversary Update until yesterday. The computer installed the update despite my best efforts to stop it. But that is a different ...
1
vote
0answers
132 views

Is Windows certificate store FIPS 140-2 level 1 certified?

I'm not really aware of FIPS 140-2 requirements, but AFAIK some MS cryptographic libraries are FIPS 140-2 level 1 certified, so here it goes my question: If I do have the following requirement: ...