Questions tagged [windows-10]
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.
0
votes
0answers
10 views
What are the security risks of using CIS Benchmarks with continuous releases of operating systems?
With the release of Windows 10 as an example where there is now increased frequency of regular updates, it appears that a delay in commensurating CIS Benchmarks may pose a risk in an incomplete secure ...
0
votes
1answer
40 views
Cmd shuts down computer immediately after windows boots up and logs into the default account/user
as the title suggests, after I login to default/main account which has administration privileges, after desktop loads almost instantly CMD opens and shuts down the computer, only way I found to stop ...
1
vote
1answer
47 views
Are my Windows 10 User Accounts exposed?
I have two user accounts on my PC. About 2 years ago I was doing some testing and left one of my local accounts open to RDP with no password accidentally for about a month.
A hacker got in and ...
0
votes
0answers
12 views
Veracrypt whole disk encrypt missing [migrated]
I just bought a new PC and I tried to encrypt it with Veracryptlike before with my older PC. But here I got the problem. I have only partition C with Windows 10 pro like before and right now I cannot ...
0
votes
0answers
37 views
Does WinRar leave cache of opened Zip Archives (Nothing extracted)
Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no ...
0
votes
0answers
23 views
Get hash and iv from V file in SAM folder Windows 10
Using information from this link: http://www.insecurity.be/blog/2018/01/21/retrieving-ntlm-hashes-and-what-changed-technical-writeup/#New_Style_Hash_Retrieval I try to do the same thing on VM with ...
0
votes
0answers
36 views
Windows Defender Network Protection component really aggressive, what to do?
Has anyone noticed that the Windows Defender Network Protection component (part of Exploit Guard) can be REALLY aggressive? Sometimes, in order to use a program, app or else, I need to set it to "...
0
votes
1answer
69 views
AES Keys Storage for encrypting hashes of SAM file in Windows 10
Hashes of user account passwords in Windows 10 (like in older versions) are stored in SAM file. Using standard utility pwdump 7 for getting these hashes gives following result:
::LM hash : NTLM hash
...
0
votes
0answers
60 views
How Windows 8 and Windows 10 hash account password?
I need some accurate information about how Windows 8 and Windows 10 perform hashing user account passwords.
I know that they are stored in SAM file and NTLMv2 algorithm is used. But while using ...
1
vote
1answer
99 views
Why does windows defender scan my computer multiple times [closed]
Occasionally, Windows Defender sends me a notification that my device was scanned. This occurrence is quite ordinary and boring, but I actually devoted two seconds to reading the entire message once, ...
3
votes
2answers
175 views
Is it dangerous to connect to a public unsecure wifi network a few seconds before connecting to a vpn?
This might be common sense but I just can't seem to get it. I purchased a vpn subscription for security ( I travel a lot therefore I am dependent of public wifi networks ). I have configured all the ...
0
votes
1answer
45 views
Run as different user VS. Run as admin
Can anyone explain what the security implications are between these options and how they should be used?
In windows (10)
Run as different user
Run as administrator
2
votes
1answer
31 views
How to control program permissions and resources in Windows
Is it possible to set specific restrictions/permissions for a program(s) by using any software/feature on Windows? Preferably set before launch and preferably set using a single software/interface, ...
0
votes
0answers
18 views
Sign windows kernel with self signed ca
I want to a security experiment on my machine since I have UEFI now and this allows me to install custom UEFI PK etc.
Is it possible that I can install next to the Microsoft PK my own PK in order to ...
1
vote
1answer
81 views
Does an unencrypted disk pose a risk to other encrypted disk's data?
I have three disks, only two are encrypted:
A: OS, encrypted
B: Main storage HDD, encrypted
C: Gaming only SSD, not encrypted.
Should I be worried that C: could cache/store sensitive data from A/B ...
4
votes
2answers
259 views
Windows 10 seems to load session before user log in, is it safe?
Last few days I noticed a really annoying problem with Windows 10 (not sure if it is caused by last update).
After computer is turned off gracefully, on next startup it loads completely session of ...
0
votes
1answer
52 views
I installed a windows app that stores cookies in a plain text un-encrypted database. Is this a problem?
I have recently installed an application that was developed with Electron that requires I authorize via Google to use the application.
I did this at the same time as monitoring the application with ...
6
votes
2answers
221 views
How to prevent Windows Update from suspending BitLocker encrytion?
I was quite shocked today to see that a Windows 10 Pro machine that I recently set up with BitLocker (startup PIN + TPM with full disk encryption) suddenly didn't have BitLocker enabled anymore:
And ...
0
votes
1answer
67 views
Does Windows 10 provide sufficient virus and threat protection? [closed]
I am configuring a new laptop with Windows 10 Home and trying to determine if it is necessary to buy one of the big antivirus packages such as Norton, McAfee, etc. Is the security software that comes ...
1
vote
1answer
123 views
WIN 10 hardening: Importance of “Allow system to be shut down without having to log on” policy
I am enforcing a hardening policy on my organization's work stations.
One of the policies I removed, under Shutdown, is called "Allow system to be shut own without having to log on".
Users started to ...
2
votes
1answer
108 views
How does Malwarebytes intercept web traffic?
I use Malwarebytes and the web filter functionality puzzles me. As far as my research has found, antivirus engines typically use a proxy to intercept web requests which typically there would be ...
2
votes
2answers
159 views
What can someone do with (non-admin) command prompt on a network?
Say that an organization has a closed network - only its own computers can access it. Each of these computers has Windows 10 Enterprise. For obvious reasons, users aren't given administrator ...
1
vote
1answer
100 views
FIDO2 on Windows: Why do I need a TPM?
I just installed the Windows 10 1809 update, which includes support for FIDO2 passwordless sign-in. I own a Yubikey 5, which supports this standard. However, I am not able to set up Windows Hello, a ...
2
votes
1answer
109 views
prevent Ransomware on CIFS shares mounted on Windows 10
I am using Windows 10 with Defender. I follow all the ground rules when dealing with the internet and staying secure. I work in IS so I'm pretty familiar with the various threat-vectors and do a good ...
1
vote
2answers
249 views
How to copy files without copying Alternate Data Streams
I want to backup my infected Windows system's files before formatting it all and reinstalling the system. I would do it from a Linux Live USB. I've heard that one should be careful in copying only the ...
0
votes
1answer
151 views
SRUM (system resource usage monitor) forensics - Windows server?
Having read a couple of articles on the SRUM DB and its use in forensics, I started digging around in Server 2016. The path referenced in the articles is not found in Sever 2016 %systemroot%\System32\...
1
vote
2answers
90 views
What files can I keep to reinstall an infected system without getting infected again?
I'm quite sure my Windows PC is infected beyond salvation and I want to format it and reinstall everything. However, I have a 128 GB SSD where I keep only the OS and a 1 TB hard disk where I have ...
1
vote
2answers
61 views
Microsoft Windows CVEs?
I know sites like cvedetails and exploit-db feature Windows 10 specific CVEs. But doesnt microsoft.com have a list (or feed) of vulnerability advisories and recently disclosed CVEs? I checked their ...
0
votes
1answer
204 views
Can SMBv1 be secure if used for just SMB server discovery?
I noticed that my SMB shares from a Samba server no longer appeared in Windows 10 network browsing (network neighborhood) in Windows file explorer. The reason turned out to be that this functionality ...
0
votes
1answer
156 views
Both Ophcrack and ONTP&RE incorrectly show Windows 10 passwords as blank
I'm trying to crack a Windows 10 laptop that I myself set a password on a day or so ago. So far I've tried booting into Ophcrack 3.6 and ONTP&RE (Offline NT Password & Registry Editor) from ...
2
votes
1answer
135 views
Is RDRAND used in a safe way by Windows 10?
This question was already answered by Linus Torvalds for Linux, and is also cited in this Q/A on this stack:
We use rdrand as _one_ of many inputs into the random pool, and we use it as a way to ...
2
votes
1answer
117 views
Is there evidence to proof that Windows is spying us ? Are the anti-spy programs works and are they trustable?
Are there any evidences that Windows is spying the users ? Let's focus on Windows 10. I am almost sure it does. The things like telemetry and Cortana... However I never saw a proof like university ...
1
vote
1answer
98 views
Being connected to a trusted VPN, do I still need personal firewall, and if so, why?
Background
Hardware: Dell Inspiron 15 Gaming 7577-92774 with recent BIOS (16-Aug-2018)
Operating System: Windows 10 Pro, version 1803 (Build 17134.285)
Antivirus / Firewall: ESET Smart Security ...
2
votes
1answer
134 views
Obtain NetNTLM/NTLM hash or login
In one CTF, I encountered a task that is solved by getting NetNTLM \ NTLM or just getting username.
Tell me, please, is there any protocol that automatically sends NetNTLM / NTLM or username, when ...
3
votes
1answer
72 views
How does Windows knows a particular software is an AV?
First, I did some GoogleFu and came up with nothing.
My question is: How does Windows 10 know things like McAfee, Symantec, AVG, etc are antivirus solutions?
My assumption is that they set a ...
7
votes
2answers
236 views
Win10: Access other logged on users' memory
How easily can admin users access the data of other users' running processes on Windows 10?
Especially webpages loaded by Chrome.
Example
Context
Bob and Alice share a single Windows 10 ...
1
vote
1answer
64 views
How to determine if Windows 10 executable can connect to my network
I'm considering use of a scanner driver I see on a website. I don't know the site or the owner so I'll be paranoid and assume that this Windows 10 exe is malicious. I can run the code in a throwaway ...
0
votes
2answers
92 views
Should I change my built-in Administrator password?
I had never thought much about this until the only account on my home PC somehow lost admin
privileges (changing to guest - I suspect this is a Microsoft bug but will probably never know).
So, ...
-1
votes
1answer
134 views
Auto-Fill Windows Security Credentials
I am having a network issue that every time in a while it requires me to enter my windows credentials (it is company security thing)
If I don't do that I will have no internet connection on my laptop
...
0
votes
1answer
96 views
Does this evidence seem consistent with an intrusion via the VNC server?
I am new to this forum, so apologies in advance if this question does not seem to fall within its scope, or if it seems too long:
On two occasions over the past ~3 weeks, a hacker gained remote ...
1
vote
2answers
872 views
Combining a fingerprint scan and password for 2-factor-authentication [closed]
UPDATE:
I found the answer to the "How To?" part of my question on superuser:
Require Fingerprint AND Password/Pin for Windows Logon
Is it possible to require a TOTP on Windows Login using existing ...
2
votes
2answers
93 views
Is there a way to prove that a program was executed on my Windows PC?
Can I prove that someone used an executable that connected to the Internet (not necessary a harmful one) on my Windows 10 PC? Especially when the program was installed on a removable device such as a ...
0
votes
0answers
17 views
Hyper-V keep enhanced session while blocking redirected drives
I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced ...
0
votes
0answers
63 views
Why 6.7 version of image magick can be exploitable even it is Vulnerable version?
I have installed a vulnerable version of the image magick i.e. 6.7 and according to this CVE-2016–3714 it is a vulnerable version. Now why I downloaded it because to get a clear picture of this ...
0
votes
0answers
65 views
Wireshark showing all ports being probed from my tablet
The first two pictures: Wireshark shows a tablet device as the source and my computer as the destination and vice versa. This tablet has never been connected via USB, FTP, BT, nothing to the computer. ...
3
votes
1answer
133 views
VeraCrypt mounted container safety
If I mount encrypted container, it stays in encrypted state until file is opened. At this moment, file is fetched in memory and decrypted - VeraCrypt - Beginner's Guide.
Can malicious program open a ...
1
vote
0answers
90 views
How do I examine a fresh Windows 10 installation
I suspect an unauthorized modification has been applied to a fresh new installation of Win 10 x64 and/or a PC running it by a person who knows me personally with the purpose of tracking my activity ...
0
votes
2answers
295 views
Is it generally safe to disable Windows 10 Proxy Auto-Discovery Protocol (WPAD)?
Is it generally safe to disable Windows 10 Proxy Auto-Discovery Protocol (WPAD)?
This might be my only option to try before contacting my ISP which could be quite annoying to do.
0
votes
1answer
290 views
Can Microsoft collect data from inside a virtual machine?
If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not.
Just FYI: no, I'm not a nutter that's ...
1
vote
0answers
86 views
How to block all aplications from internet connection?
I would like to block all windows10 applications from internet access
So I found a settings screen on the windows firewall (Windows Firewall\Allowed apps) I would like to uncheck everything from this ...
