Related to security concerns specific to the Microsoft Windows operating system itself. For security of applications that happen to be running on Windows, please use [appsec]. For the X Window System, please use [x11].

learn more… | top users | synonyms

1
vote
2answers
67 views

Is Qubes OS more secure than running a set of activity related VMs?

I'd like to skip the argument about Linux being more secure than Windows, and purely focus on the security boundaries between Host OS and VMs. Is Qubes OS theoretically more secure than say - Windows ...
4
votes
3answers
67 views

Can I test my own network?

I'm currently trying to enter the field of information security and I was just wondering if there was anything barring me from testing my own network for security vulnerabilities? I only have a couple ...
6
votes
0answers
51 views

Can I use disk encryption and track my device at the same time, in case it's stolen or lost?

I would like to encrypt a single user profile but have been told EFS isn't the solution. I have a laptop that I leave in my bag and use for work and private purposes. I want to secure data in case my ...
1
vote
1answer
22 views

Unable to PSEXEC into machine with admin hash

I'm doing a penetration test at the moment, and I am trying to PSEXEC into a machine for which I have the local administrator hash. I am attempting this with metasploit and metasploits psexec module. ...
0
votes
0answers
81 views

Possible to detect Metasploit trojan installation on Windows 10?

I'm concerned my Win 10 installation may be infected with one of Metasploit's trojan variants. How could I go about confirming or disproving this suspicion? Are there ways to detect Metasploit hacks?
0
votes
2answers
88 views

How secure is Windows 10 account control?

I have a Microsoft account in my machine (Admin). I set a guest account (Standard) for a friend so he can play games. Is there any way he could access my files/folders info? I mean, get data, view ...
4
votes
2answers
77 views

How attaching to a process with a debugger can compromise system's security?

Visual Studio shows a warning, trying to attach to a different user's process: Searching for an explanation, I've found the MSDN article, claiming that: An untrusted process that contains ...
3
votes
2answers
139 views

Ransom32: How does it work?

Ransom32 seems to be a new ransomware written (partly) in JavaScript. As I understand it, it doesn't affect a user through a browser / by visiting a website, but by downloading some .rar file which ...
0
votes
1answer
78 views

Can I detect when a file is copied on Windows?

Can I detect when a file is copied on Windows? Will it create an event in the Windows log? Or can I not? I know you can detect when a file is created due to the file pointers and stuff, but can you ...
2
votes
1answer
36 views
+50

What is the definition for different access attributes in object access auditing?

Though there is documentation available about configuring Object Access auditing, there is no place where I have found any documents explaining the different attributes in Object Access Auditing. Can ...
3
votes
0answers
49 views

security of libgcrypt when cross-compiling for windows?

Looking at libgcrypt, specifically secmem.c it seems that it does not account for windows-specific memory handling (e.g. VirtualLock) and in fact there is a very troubling comment: #elif defined (...
3
votes
0answers
34 views

Host process for windows services network activity between other computer on same network

Wondering if this is normal? I have two PCs hooked up to a router and when the other one powers up and I check my firewall I see that there's some sporadic network activity going on (mainly upload/...
0
votes
1answer
32 views

Shared folders in Windows to/from unsecured PC on the same network

I have a Windows 10 desktop computer which is my main device. It's password-protected and I'm not concerned about it being physically accessed by bad actors. I have a Windows 7 laptop with a fresh OS ...
-3
votes
1answer
82 views

checking if malware altered system files in windows

a friend called me today because he opened an attachment of an email. It was a double zipped exe file - and malware: I started to analyze the file: first with virustotal - then with radare2 and the ...
3
votes
4answers
310 views

Is a computer more vulnerable if wireless is left on when booting?

Normally I switch off wireless on my laptop before I shut it down but I forgot to do this last night. So this morning, after I booted up the laptop, I saw the wireless notification on the bottom right ...
0
votes
0answers
30 views

How to record the event that an attachment from Outlook has been clicked to run or downloaded to the disk? [migrated]

I am developing a solution to monitor security events on Windows. Two of the events to monitor are: an attachment from an email (Outlook) has been clicked to run or downloaded to the disk a link ...
3
votes
1answer
45 views

Possible security measures to put into place before allowing screen sharing

I have someone who is having their non profit small company receive a financial audit. They are prepared for it but the financial auditors have asked to also do part of it remotely and would like to ...
-3
votes
0answers
42 views

How to secure locally created web applications [duplicate]

I'm a web developer, My customers always asking me to make a local programs to them like using C# or MS Access desktop application. I don't want to switch my programming knowledge.. the problem is if ...
3
votes
1answer
42 views

Application Whitelisting Approaches/Options on non-Enterprise Windows PCs

For a while now I've been kicking around the idea of implementing application whitelisting on a few sets of machines (owned by 2-3 different consulting clients) I administer that seem suitable for it. ...
3
votes
2answers
102 views

Comparison and difference between CAs

While doing some Google searches, I learnt that there are a lot of different Certification Authorities like the Windows role named "Active Directory Certificate Services", the OpenSSL library or the ...
1
vote
0answers
24 views

Denying access to USB ports, but setting up an “escalation” for allowing access on-demand [migrated]

For Windows 7/10, is there a way to block access to USB ports, but make it so that it could be "authorized" UAC-style by an Administrator, on a case-by-case basis? I know that I can block the USB ...
0
votes
1answer
58 views

Is it safe to use this online tool to generate my Windows Answer File?

I found a Tool to generate an unattended Windows Answer File for Windows Installation but I'm not sure if it is safe to use. It asks for the default password to setup a local admin user and the ...
0
votes
1answer
31 views

How to connect to Windows RDP and delegate authentication to a (reverse) proxy?

Looking for the following setup: Client connects to Windows RDP server through proxy server. The client is in public network hence can't send username/password for logon. The proxy server in between ...
8
votes
1answer
180 views

Does Logging out of Windows make my computer much safer than only locking?

I recently saw the following security tip on my company's intranet: When you are done using a computer, always Log Off, Restart, or Shut Down. If you only lock your computer, your account ...
3
votes
2answers
229 views

Detecting when a screenshot is taken by a software (spyware) in Windows [closed]

Most trojaning, spyware and keylogger tools have the ability to take screenshots. Is there a way to detect if an app or software is taking a screenshot in Windows? Maybe a Windows API call or dll? ...
3
votes
3answers
205 views

Is Bitlocker trustworthy?

My question isn't about whether or not the encryption on Bitlocker works, but whether or not there has been any security audits about potential backdoors Microsoft may have installed. I don't have a ...
-5
votes
0answers
43 views

node.exe using network from USA

I found this process in my network via resource monitor.. why would it be there? (it was there before opening Firefox) Are the other Firefox services legit? Two of them are linked to amazon (the ...
0
votes
0answers
36 views

How to extract the hash from SMB

I have a running PC which I need to test against.It is running Windows with SMB enabled. When capturing using Wireshark while connecting with an incorrect password I see packets being sent to / from ...
1
vote
1answer
77 views

Creating a system to try new software out

I am using Windows 10 and I like it. I would like to experiment without doing harm to my main system that I work with. Experimenting means, downloading software from doubtful sources, executing ...
-2
votes
0answers
27 views

Kali Linux is not showing on booting time [migrated]

I have been installed the Kali Linux. Its successfully installed without any error. But after installation while, I tried to reboot the system to start the Kali Linux. There was no option showing for ...
-1
votes
0answers
10 views

Need help decrypting a Windows 7 system drive with Diskcryptor [migrated]

I've had my Windows 7 64-bit Professional system drive fully encrypted with Diskcryptor, and now I'm trying to unencrypt it so that I can install several new operating systems. I used DiskCryptor to ...
0
votes
2answers
92 views

C# .Net most secure way to store RSA Key Pair in Windows

At the moment I am looking into the most secure way to store a private RSA key on Windows. Making it as much usable for the end user as possible, while keeping the security to its highest. As this ...
-7
votes
1answer
56 views

bind(merge) exe with jpg [closed]

i have an exe file and a jpg file, i want to bind them into one executable(exe) file, in the way that when user double click on that executable: first image will shown to him then the exe file will ...
1
vote
0answers
57 views

Bypass UAC without meterpreter session?

I have a research project about "Malvertising". I try to show an attack by using metasploit and I am using a Flash Plugin to hack the victim (exploit/multi/browser/adobe_flash_hacking_team_uaf) This ...
1
vote
1answer
45 views

SHA-256 Timestamp not recognized in windows 7 when dual signed

I wanted to dual sign my exe so that the XP and Vista users can use the software. But when i dual sign the exe with SHA1 and SHA256 timestamps, In windows7 only 1 timestamp is shown. To dual sign I ...
0
votes
0answers
14 views

CertGetCertificateChain takes 15 seconds for chain building [migrated]

I have a semi-isolated Windows 10 system, which is not connected to public internet network but connected to local network. In my application I need to verify the trust status of the received ...
0
votes
0answers
33 views

InitializeSecurityContext takes 45 seconds to come out

For an expired certificate sent by a server, the InitializeSecurityContext function takes more than 45 seconds to come out with SEC_E_CERT_EXPIRED. Is there any configuration to avoid this much ...
0
votes
1answer
22 views

How can I determine the common cryptographic suites I need to enable on my browser for common websites?

How do I determine the common cryptographic suites I need to enable on my browsers (I use IE11, Firefox/Nightly 49, Chrome 51) running on Windows for common websites, for eg, www.google.com, www.w3....
-4
votes
0answers
87 views

Why does this registry key keep getting recreated even if I delete it?

When I open my registry editor I see this: C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -noprofile -windowstyle hidden -executionpolicy bypass iex ([Text.Encoding]::ASCII.GetString([...
-1
votes
1answer
52 views

What are the risks of an open regedit.msc in Windows?

Curious as to what sort of damage can be done with an open registry. Is it worth it applying group policy that restricts registry edit access, or is this not necessary?
3
votes
2answers
256 views

Is it safe to not update Windows if you dont accept any incoming connections?

I see this guy shared his thought: How to be safe even without most updated Windows updates So he claims that as long as you do not accept any incoming connections and just use sandbox of Chrome, ...
2
votes
1answer
145 views

How can Windows 10 not have the password in memory?

I have read that Windows 10 does not hold the password in memory from the creator of mimikatz: Starting with 8.x and 10, by default, there is no password in memory. Exceptions: When ...
13
votes
2answers
3k views

How does Internet Explorer know what text files I have viewed?

I am using Windows 8.1 and Internet Explorer 11. Each time I use File Explorer to view a .txt file the history of Internet Explorer shows that I viewed that file in pages visited on this PC. ...