Questions tagged [windows-10]
An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.
237
questions
2
votes
2answers
154 views
Are there any security hazards to installing Ubutnu for Windows 10?
I only want a bash shell in Windows 10 that runs faster and doesn't have any of the quirks of git bash / MINGW64, like for instance all of that CRLF garbage.
Is there any security harm in ...
0
votes
0answers
80 views
Escaping Windows 10 Kiosk mode?
I made a very simple cloud service (cloud gaming) using Windows 10's new feature called Assigned Access then choosing an app and a user as Kiosk PC which is used for Windows Store applications. Users ...
0
votes
0answers
33 views
Url Storage, History & Personal Data
Just Curious to Know,
Where my information is being stored and how long its kept for
I'm running the latest version of windows 10,
my main Browser being firefox developer edition 68.
I clear my ...
0
votes
0answers
22 views
Does dism.log contain any sensitive information on Windows 10?
I'm looking to learn more about GPOs and powershell and when I tried to install the RSAT GPMC I received an error.
I have the log of the session in dism.log but, I'm hesitant to post it anywhere as ...
1
vote
0answers
29 views
How do you lock down a users access to ODBC settings in Windows 10?
I was working with a users computer yesterday because they complained that an MS-Access Database they were using said that an ODBC datasource was not accessible.
I went to change the settings on the ...
0
votes
0answers
22 views
Nessus Authentication on Windows Enterprise 10 using a local account
We have a stand alone Win Enterprise 10 machine (an old HP machine). In this (closed) environment, we do not have a Windows AD for authentication. All accounts are local.
We've added a local Nessus ...
-1
votes
0answers
14 views
Dual boot Kali with Windows 10 (directly booting to Windows 10) [migrated]
I have a HP pavillion Laptop with 8Gb Ram and 1Tb HDD.
Recently booted Windows 10 with Kali. Followed these steps.
However when i m trying to restart it is directly booting to Windows 10.
In BIOS ...
1
vote
1answer
80 views
Gather system metrics securely from infected VM
I intend to train an RNN on snapshots of the VM metrics to classify malware. I will, therefore, run hundreds of different pieces of malware inside that VM. It has been isolated from my host (as best ...
1
vote
1answer
64 views
Unknown manufacturer of services in windows system configuration
I would like to ask if I can trust unknown manufacturer detected by windows system configuration.
As you can see in the screenshot, all of the other services is known manufacturer but there is one ...
-1
votes
0answers
20 views
How to see see/configure Windows Defender Firewall logs in non-domain private Windows 10 Computer? [migrated]
How to see see/configure Windows Defender Firewall logs in non-domain private Windows 10 Computer? Of course - I am aware of the answer How do I access a firewall log (Windows 10 w. Windows Defender) ...
1
vote
3answers
108 views
Can any Windows app install a kernel driver? if not, then how can Anti-Viruses install kernel drivers?
Can any application install a kernel driver? if not, then how Windows decides who can and who cannot?
If AVs can install kernel drivers, considering they are an application with an installer just like ...
0
votes
1answer
60 views
Blocking Standard Users (Win 10) from Adding Chrome Extensions
I want to block standard users (Win 10) from adding Chrome extensions. When the standard user renames the default folder, it overwrites any security policies applied on the Extensions folder.
0
votes
0answers
56 views
Will my Windows driver stop being reported as malware if signed? [duplicate]
I have developed an IRP hooking based driver for one of my clients. Avast oes not complain about it but his AV suite reports it as malware. The lient will eventually sign this driver, but will it ...
0
votes
0answers
39 views
CIS 2.3.4.1 (L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users'
I am implementing CIS on Windows 10 1803 and I cannot work out this control.
Description:
This policy setting determines who is allowed to format and eject removable NTFS media. You can use this ...
0
votes
1answer
133 views
How can someone track work activity? [closed]
Problem:
Recently we had an interesting thing which happened at work. My colleague was playing some Flash games at work and after some time someone from organization remarked about that and asked to ...
1
vote
2answers
176 views
Can rootkits hide their internet usage from resource-manager and third party software in windows 10? If so, how?
Lets say I have the latest windows 10 version. I also have DU meter for checking my network usage
I know that in windows there is a linked list of processes that many rootkits tend to remove ...
1
vote
0answers
55 views
Is Windows RPC (port 135) secure enough for domain-wide access
I have a network of approximately 150 computers that I'd like to regularly monitor. My proposed way of doing so involves running remote commands like reg query \\<ip> or systeminfo /S <ip>....
-1
votes
1answer
119 views
How do I recover a deleted file too large to go to recycle bin? [closed]
I mistakenly deleted a very important 50 gb file from my 1 tb hard drive, and the file was too big to go to recycle bin. How do I recover it?
2
votes
3answers
460 views
How does Logitech Options software automatically launch from a mouse dongle?
I recently purchased a Logitech MX Master 2S mouse. I had no intention of installing the "options software" that came with the mouse. I simply desired a wireless mouse that wasn't cheap and flimsy.
...
0
votes
0answers
65 views
What process inside Windows recognizes exploits?
When I try to save a file containing code exploiting a well-known vulnerability (link redirects to an example git-hub code), windows alerts, that a virus was found and a few seconds later, the file is ...
0
votes
1answer
82 views
Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?
Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
1
vote
2answers
164 views
If I turn off Windows Defender Credential Manager off in Windows 10 so I can run a virtual machine in Virtual Box, is that a bad idea?
My processor is supposed to support virtualization:
cpu.inf:5f63e534115a322c:IntelPPM_Inst.NT:10.0.17134.765:ACPI\GenuineIntel_-_Intel64
ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_37_-_INTEL(R)_CORE(...
2
votes
2answers
172 views
How does Window Hello protect against brute forcing?
With my Windows 10 computer, I have the option to set up a PIN with Windows Hello (I believe it's with that program). My normal Outlook password is 15+ characters mixed with upper case and lower case ...
-1
votes
1answer
138 views
Is Windows 10 Vulnerable to IPv6 Router Advertisement Flooding?
In a DEFCON 19 video Sam Bowne says that windows 7 machines CPU goes to 100% if you send a bunch of IPv6 Router Advertisement requests on a network. What would happen to a Windows 10 machine? Would it ...
0
votes
1answer
45 views
Where can I configure certificate rules on Windows 10?
This excellent SSO answer recommends to use certificate rules on Windows’ executables, as explained here by Microsoft. The latter says that the “location” of this setting is:
Computer Configuration\...
0
votes
0answers
46 views
What is possible with a non-administrative users Ticket Granting Ticket and/or NTLM hash?
During a penetration test, if a users NTLM hash or a valid Kerberos TGT is compromised, what attacks are possible if the user is not an administrator on any (in scope) workstations? For instance, it ...
1
vote
2answers
75 views
Can I alter the DNS cache on my Computer?
Can I alter the DNS cache of my computer.
When I search online it only shows result to flush DNS cache and not how to alter it.
The DNS cache saved on Windows consist of URL,serverIP and many other ...
2
votes
0answers
73 views
Extracted LM Hashes doesnt match actual password
I'm new to LM Hashing and Windows authentication, and I'm having problems with LM hashes.
I've created 2 accounts with the password "123", and both of them have different hashes, and none of the ...
0
votes
1answer
71 views
Blocking a Specific Program
My issue is more towards blocking a specific application/program (In this case, the Epic Games Launcher) from accessing my files. I know the best answer is just to remove that software. The reason ...
0
votes
0answers
68 views
How to spot malwares that hide their disk usage from Resource monitor?
So lets say a malware has hid itself from task manager, so it wont show up in there.
lets also say that it also hides its disk usage from resource monitor as well. (based on previously asked ...
5
votes
1answer
311 views
What is Windows Watchdog and what do we know about it?
Today I came across this term "Watchdog", and something about "DPC_WATCHDOG VIOLATION" errors in Windows. I tried googling around but I only found posts on how to fix Watchdog errors, but nothing on ...
0
votes
1answer
57 views
Vulnerabilities for Red Team assessment [closed]
I'm working on my dissertation for my bachelor's degree. I'm trying to create a framework which would make it possible to launch an entire virtual infrastructure, this would then be used to simulate a ...
9
votes
2answers
2k views
How to prevent Firefox and Chrome from opening ports in the firewall?
I have noticed that Firefox and Chrome have opened ports for unsolicited inbound traffic in the Windows firewall. This happened with Windows 7 x64 and Windows 10. (Here, I am talking about the ...
2
votes
0answers
247 views
Eventviewer empty logs with English written in Cyrillic Greek
So a while ago I entered my event viewer on windows 10 and I noticed a bunch of weird entries. They look like they where written in English but with the use of Cyrillic and Greek alphabets. I am ...
46
votes
9answers
11k views
Replacing Windows 7 security updates with anti-virus?
Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here.
I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
1
vote
3answers
127 views
Is it ill-advised to use the same password for lock screen and full disk encryption (Windows 10 BitLocker)?
I am wondering which attacks can be prevented by using a different password for the lock screen and full disk encryption. The goal is to prevent people from accessing my data. The details of my setup ...
0
votes
1answer
449 views
Can a Windows 10 Local Account password be retrieved
I have heard that Windows (10) local accounts are not that secure. I am however particularly wondering whether the password can be retrieved using any tools.
So I am not talking about resetting it ...
0
votes
0answers
51 views
Verify that a Software Restriction Policy (SRP) rule is effectively applied?
I am running Windows 10 Pro and I would like to check the software restriction policies, with timestamps on the logs if possible. Indeed, I found a solution but without timestamping on the logs.
...
80
votes
2answers
20k views
Does Windows 10's telemetry include sending *.doc files if Word crashed?
I'm reading through the extensive description on which data is acquired by Microsoft's telemetry 1 including the following paragraph:
User generated files -- files that are indicated as a potential ...
0
votes
1answer
98 views
How to set up the Tor browser on Linux Mint in a VM with a VPN on the Host
(Forgive me, I don't know whether to post this here for in the "Tor" community)
I'm brand new to Tor, I understand the basics of how it works and the Do's & Don'ts. I have a Windows 10 computer (...
1
vote
1answer
93 views
Why Bitlocker requires partition on some computers but not all
We have HP desktop computers all identical.
I setup Bitlocker encryption on one, no partition was required and the computer was fully encrypted.
Second computer gave me a different result, Bitlocker ...
0
votes
1answer
458 views
Strange and unknown user name on Windows 10
Today I was through folder information and, when I switched to the security tab, I observed that there were 5 users listed there. In this list, there was also a user called "yupgyzmhuma". I tried ...
1
vote
0answers
42 views
Remote access to Windows Workstation with credentials, after Windows 10 - 1809
I am a newbie in terms of OS security and I started learning from Windows; in particular I downloaded Win10 virtual machine and I am simulating various attack / defense scenarios on it.
I would like ...
0
votes
0answers
83 views
applocker script rules blocking diagnostic troubleshooter by default
My googling came up with nothing useful. I assume others must have ran into this too.
If we start the Network Troubleshooter wizard it generates some temp ps1 files that are blocked silently to the ...
0
votes
2answers
433 views
Cmd shuts down computer immediately after windows boots up and logs into the default account/user [closed]
as the title suggests, after I login to default/main account which has administration privileges, after desktop loads almost instantly CMD opens and shuts down the computer, only way I found to stop ...
1
vote
1answer
64 views
Are my Windows 10 User Accounts exposed?
I have two user accounts on my PC. About 2 years ago I was doing some testing and left one of my local accounts open to RDP with no password accidentally for about a month.
A hacker got in and ...
0
votes
0answers
47 views
Does WinRar leave cache of opened Zip Archives (Nothing extracted)
Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no ...
0
votes
0answers
138 views
Get hash and iv from V file in SAM folder Windows 10
Using information from this link: http://www.insecurity.be/blog/2018/01/21/retrieving-ntlm-hashes-and-what-changed-technical-writeup/#New_Style_Hash_Retrieval I try to do the same thing on VM with ...
0
votes
1answer
130 views
Windows Defender Network Protection component really aggressive, what to do?
Has anyone noticed that the Windows Defender Network Protection component (part of Exploit Guard) can be REALLY aggressive? Sometimes, in order to use a program, app or else, I need to set it to "...
0
votes
1answer
300 views
AES Keys Storage for encrypting hashes of SAM file in Windows 10
Hashes of user account passwords in Windows 10 (like in older versions) are stored in SAM file. Using standard utility pwdump 7 for getting these hashes gives following result:
::LM hash : NTLM hash
...
