Questions tagged [windows-10]
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.
356
questions
1
vote
0
answers
52
views
Is it safe to disable certificate checking?
I am developing a web API, which runs only on my local computer, and using PowerShell to test it. Here is an example test:
$baseUri = 'https://localhost:5001'
$body = '{
"title": "...
2
votes
0
answers
56
views
Does Windows 10 read/run/care about USB devices plugged in "Lock Screen" mode?
Whenever I leave my computer for the bathroom or anything inside the living space, I press WinKey + L to enter the "Lock Screen" mode. (If I go outside, I turn it off completely.)
Let's say ...
- 21
2
votes
0
answers
89
views
Use platform TPM as U2F for web applications
The Problem:
Use the platform TMP of my Windows Laptop/PC (no external device or USB token) as U2F in a web application to check if it is a known device.
My intended solution:
I need to store/create ...
- 71
1
vote
1
answer
109
views
Why does this Windows process run with High integrity?
Background
I'm trying to understand more about the Mandatory Integrity Control system in Windows, and have been looking through the background processes that are running at High integrity on my laptop....
- 113
1
vote
1
answer
98
views
How risky is it to let someone know the name of your Windows PC?
I have here a situation where if I share this file with someone on the internet, the file may contain: 1. data pointing to the directories where it is stored on my computer, along with 2. the name of ...
- 13
2
votes
1
answer
121
views
Does only having Microsoft Office installed make you vulnerable to the CVE-2022-30190 RCE or having Windows as your OS is enough?
I was wondering whether you need to have Microsoft Office installed to be vulnerable to CVE-2022-30190 RCE.
As far as I understand, MSDT is the issue here (the attack vector so to say) and as shown ...
- 1,364
0
votes
2
answers
91
views
Unintended file downloaded. Am I likely to have gotten a virus?
I clicked on a link that appeared to be perfectly legit. It proceeded to bring me to a suspicious website that downloaded a file to my PC automatically. I deleted the file quickly and never ran it. I ...
0
votes
1
answer
84
views
Non executable virus?
Bitdefender detected
.class -- File path: ...\tetra-1.12.2.jar => .../GuiStats.class -- Threat name: Java.Trojan.GenericGBA.31135
.tif -- File path: ...\crash-81154...60f8.tif -- Threat name: ...
0
votes
0
answers
38
views
Windows 10 Cybersecurity on Stand-Alone Computer
I have been asked to investigate what capabilities exist within Windows 10 where the environment for this system is isolated. I believe it would not be able to benefit from an enterprise security ...
- 255
0
votes
2
answers
76
views
Is this weird folder "Up8d76c_31187" a windows thing?
I noticed it becaue one of these exe's started running after a BSOD.
Putting one of the exe's into VirusTotal gives it a 3/70. How can I examine this further?
Edit: Other exe's are worse: VirusTotal ...
- 103
2
votes
0
answers
126
views
Can a virus infect windows 10 bootable media?
I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
- 29
1
vote
2
answers
276
views
Is Windows 10 Home more secure than Windows 10 Pro in some way?
I'm planning to do a fresh install of Windows 10 on my mother's computer. Despite it has Pro version right now, I wonder if I should use Home version instead, which is also called Single Language.
...
- 747
0
votes
0
answers
90
views
How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]
My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine.
I am ...
0
votes
2
answers
113
views
Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]
I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he'd like and even he can look at any screen to ...
0
votes
1
answer
201
views
Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]
Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
0
votes
0
answers
35
views
No UAC appearing for newly installed applications
Recently I have noticed that my system doesn't show the UAC prompt whenever I install some application from another source, I have UAC on and everything is working fine, I also have an administrator ...
- 1
1
vote
3
answers
201
views
Bought a new Laptop. Can't reset. Is it Safe?
I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
- 13
0
votes
0
answers
116
views
TPM and Windows Credential Manager
I'm working on a project that needs to store some encrypted data along with their keys on a Windows 10 computer. The problem is obviously how to protect the keys. My original idea was to use DPAPI ...
- 1
0
votes
1
answer
428
views
pwdump8-8.2 correct hash for Microsoft Account Win10
I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account.
I used - PwDump8.2
I have an admin account unlocked on the system and can access most files.
I know ...
- 5
1
vote
0
answers
93
views
Does Windows 10 log network activity?
I've been thinking a lot about private browsing recently. Here's a scenario I've been thinking about:
Let's say I have a browser installed on my Windows 10 PC called "ChromeFox" (made up, it'...
0
votes
0
answers
105
views
Windows 10 user autologin password lost
A while ago I have set up the autologin for my Windows 10 user.
I do not know the password anymore.
I can login to the system (as has autologin now). But I cannot change the password.
Is it possible ...
0
votes
2
answers
164
views
How to securely encrypt my computer and protect it from thieves and others
I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
0
votes
2
answers
187
views
Setting Up MFA and/or best security for personal computer for RDS
I am in the process of converting an older computer into a dedicated machine learning server. I want to be able to RDS into it from my current computer and ideally from anywhere. However, I do want to ...
- 53
-3
votes
1
answer
90
views
Is Windows 10 Insider Build usable within SOC 2 compliance? [closed]
Or Windows 11 pre-release, just cause I'm curious?
(By employees if that wasn't implicit.)
0
votes
0
answers
71
views
Unsigned Intel item in start-up?
Autoruns shows three Intel items in my Windows 10 19043 start-up
Two of them are signed, one of them is not.
Unsigned = C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
When I say ...
0
votes
1
answer
222
views
How to find discrepancy between exploitable and unexploitable VM
For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
1
vote
0
answers
19
views
Suspicious HEAD http requests [duplicate]
On my Windows 10 machine, I run mitmproxy on localhost:8080. I've changed the system proxy setting to point to my local proxy server.
Apart from what I expect to see, I can also see the following HEAD ...
- 111
0
votes
0
answers
562
views
Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?
I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox.
I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
- 1
0
votes
1
answer
270
views
How to prevent DNS leaks without using a VPN
I use Windows 10, and I've configured my network to use Quad9 in Windows settings.
I've also enabled DoH.
Now, when I go to ExpressVPN DNS Leak
Test webpage to know whether I have DNS leaks or not, it ...
- 1
0
votes
1
answer
172
views
How do I stop local users from bypassing the UAC on Windows 10?
I'm the admin for a Windows 10 machine with a few local users. While I understand there are other ways to bypass security with access to the physical machine, I'd like to protect against hacks that ...
- 305
0
votes
0
answers
53
views
AppCertDLLs does not work in GUI apps, why?
I was trying to automatically inject a dll to every process (including GUI) whenever it is started by a user . My DLL hooks DoDragDrop method of winapi and communicates with server to decide allow or ...
5
votes
0
answers
365
views
Windows Defender catches Trojan right after clean install
I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
- 51
0
votes
1
answer
106
views
Does data recovery of file depends on its extension?
Most free to use data recovery tools (Recuva, Easus, MiniTools) offers good recovery with known file extensions for picutres, videos and documents (.png, .xlsx etc). But lesser known file extensions, ...
- 103
1
vote
1
answer
388
views
Tricking a windows 10 computer into thinking a USB being plugged in is a mouse for code execution [closed]
Is it possible to "trick" a Windows 10 PC into thinking a flash drive is a mouse to execute code on the machine? If so, how?
Note: I'm not trying to do anything malicious. All of this is ...
- 21
0
votes
1
answer
190
views
How to check TCP sequence number to detect mitm?
I suspect that my router (I'm using an iPhone as router) has been owned and the attacker is making some kind of mitm attack. I suspect also that some html and js code has not been sent to my laptop ...
0
votes
0
answers
274
views
Isolate Dual-Boot Windows OS's - Encryption Programs
My machine has
Name
Model
Disk No.
Capacity
SDD
LITEON L8H
0
240 GB
HDD
HGST
1
1 TB ( 932 Gb )
SDD contains: Windows 10 (for work)
HDD contains:
Partition 1 /
├─ Files ( text , imgs , video , ...
- 1
0
votes
0
answers
103
views
Securely deleting Volume Shadow Service (VSS) in Windows 10
Suppose that VSS is enabled and snapshots exist. If I run a program to wipe the free disk space on my drive, would this delete the VSS snapshots? It might do since the program works by filling up the ...
0
votes
2
answers
216
views
Haven't updated my Windows 10 for more than a year
Almost a year ago, I dual-booted Windows 10 and Linux Mint. And since then, I haven't booted into my Windows 10 OS.
I still remember that the Wi-Fi adapter was off when I shut my Windows 10 down.
Now, ...
9
votes
2
answers
501
views
How effective is Windows KDP for exploit mitigation in practice?
Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at ...
- 63.8k
4
votes
1
answer
242
views
Is Sleep mode safe?
If a PC has rootkit, when it goes into sleep mode, can rootkit do anything to it while it’s in state of sleeping? Meaning steal data, open programs and basically do anything. Assuming it’s not BIOS ...
- 41
0
votes
2
answers
104
views
Is it possible to remove data from specific folders on any unauthorized login attempt?
I have a Windows 10 PC. I don't want anyone to grab my private data stored on my PC even if they manage to get my login password.
Earlier, I used software that can easily get rid of any administrator ...
- 101
0
votes
0
answers
439
views
Crack Windows 10 password with Cain and Able
A few months ago I reset my Windows password but my keyboard must have had a sticky key or two, effectively changing my password to an unknown password. Out of desperation and a little research I used ...
- 101
0
votes
0
answers
43
views
Could just downloading (not opening) .tgz file infect Windows 10? [duplicate]
Today I received some e-mail to Thunderbird. It had image attached that I clicked:
Which sent me to onedrive.live.com/download?... and automatically downloaded .tgz file. I am not even sure if the ...
- 101
1
vote
1
answer
250
views
Does a BitLocker recovery key have any use on removable media, a.k.a 'BitLocker to Go', other than if you forget your password?
I understand that there are multiple reasons that a recovery key might be needed on a system partition, but why would I want the extra security risk of having a way of circumventing my password for ...
- 113
1
vote
0
answers
80
views
watch-video.net malware and preventing these types of infections at the network level [closed]
How does a computer get infected with watch-video.net malware, and why aren't popular tools like windows defender or malwarebytes able to detect and remove it? Is there a practical way to prevent ...
- 225
1
vote
1
answer
523
views
How to run PrintSpoofer in memory from powershell?
PrintSpoofer uses named pipe impersonation to elevate on Windows 10 to SYSTEM from a user with SeImpersonatePrivilege (Local Service, Network Service, Administrator etc.). The compiled version is ...
- 123
1
vote
2
answers
165
views
Does Windows log desktop application passwords?
The other day I logged into Discord on my friend's computer using the desktop application. Does Windows log these events somewhere? Does it store the password hash or some sort of authentication token?...
- 13
1
vote
1
answer
192
views
Windows 10 master key folder empty
I am currently trying to decrypt my files from my old laptop. I have a backup of the user folder of the old laptop and I am trying to find the old user master key to decrypt my files based on mimikatz ...
- 11
0
votes
2
answers
721
views
How safe is it to use SMB file share on a machine running up-to-date Windows 10 LTSC through the Internet?
Running Windows 10 LTSC. Forwarded 445 port on the router to Windows SMB.
Assuming that:
My machine has no viruses in it (fresh Windows installation)
It has been updated to the latest OS release
I am ...
1
vote
0
answers
88
views
Is the ability to export HKEY_LOCAL_MACHINE\SAM and HKEY_LOCAL_MACHINE\SYSTEM as .reg files a security concern?
I am concerned that if it is possible to copy these as .reg files (without privs) and then (on another machine) reverse the .hiv files from them... this would probably be bad, which makes me think it'...
- 93