Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [windows-10]

An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.

0
votes
0answers
64 views

What process inside Windows recognizes exploits?

When I try to save a file containing code exploiting a well-known vulnerability (link redirects to an example git-hub code), windows alerts, that a virus was found and a few seconds later, the file is ...
-2
votes
0answers
37 views

How can I prevent Windows from automatically deleting malicious files? [migrated]

I am working on a presentation and want to copy an old exploit code (github-file) to a file in Sublime3 with nice syntax, highlighting, and so on. But when I try to save the file, Windows ...
0
votes
1answer
58 views

Can we implement custom algorithms to encode and decode wifi password hashes between Windows 10 and our Router?

Windows 10 has its own way of encrypting hashes, but these can be brute-forced by hashcat. One of our students created 2 of his own password encryption algorithms in python (One for encode, one for ...
1
vote
2answers
119 views

If I turn off Windows Defender Credential Manager off in Windows 10 so I can run a virtual machine in Virtual Box, is that a bad idea?

My processor is supposed to support virtualization: cpu.inf:5f63e534115a322c:IntelPPM_Inst.NT:10.0.17134.765:ACPI\GenuineIntel_-_Intel64 ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_37_-_INTEL(R)_CORE(...
2
votes
2answers
154 views

How does Window Hello protect against brute forcing?

With my Windows 10 computer, I have the option to set up a PIN with Windows Hello (I believe it's with that program). My normal Outlook password is 15+ characters mixed with upper case and lower case ...
-1
votes
1answer
124 views

Is Windows 10 Vulnerable to IPv6 Router Advertisement Flooding?

In a DEFCON 19 video Sam Bowne says that windows 7 machines CPU goes to 100% if you send a bunch of IPv6 Router Advertisement requests on a network. What would happen to a Windows 10 machine? Would it ...
0
votes
1answer
39 views

Where can I configure certificate rules on Windows 10?

This excellent SSO answer recommends to use certificate rules on Windows’ executables, as explained here by Microsoft. The latter says that the “location” of this setting is: Computer Configuration\...
0
votes
0answers
45 views

What is possible with a non-administrative users Ticket Granting Ticket and/or NTLM hash?

During a penetration test, if a users NTLM hash or a valid Kerberos TGT is compromised, what attacks are possible if the user is not an administrator on any (in scope) workstations? For instance, it ...
1
vote
2answers
73 views

Can I alter the DNS cache on my Computer?

Can I alter the DNS cache of my computer. When I search online it only shows result to flush DNS cache and not how to alter it. The DNS cache saved on Windows consist of URL,serverIP and many other ...
2
votes
0answers
56 views

Extracted LM Hashes doesnt match actual password

I'm new to LM Hashing and Windows authentication, and I'm having problems with LM hashes. I've created 2 accounts with the password "123", and both of them have different hashes, and none of the ...
0
votes
1answer
64 views

Blocking a Specific Program

My issue is more towards blocking a specific application/program (In this case, the Epic Games Launcher) from accessing my files. I know the best answer is just to remove that software. The reason ...
0
votes
0answers
63 views

How to spot malwares that hide their disk usage from Resource monitor?

So lets say a malware has hid itself from task manager, so it wont show up in there. lets also say that it also hides its disk usage from resource monitor as well. (based on previously asked ...
5
votes
1answer
202 views

What is Windows Watchdog and what do we know about it?

Today I came across this term "Watchdog", and something about "DPC_WATCHDOG VIOLATION" errors in Windows. I tried googling around but I only found posts on how to fix Watchdog errors, but nothing on ...
0
votes
1answer
55 views

Vulnerabilities for Red Team assessment [closed]

I'm working on my dissertation for my bachelor's degree. I'm trying to create a framework which would make it possible to launch an entire virtual infrastructure, this would then be used to simulate a ...
9
votes
2answers
2k views

How to prevent Firefox and Chrome from opening ports in the firewall?

I have noticed that Firefox and Chrome have opened ports for unsolicited inbound traffic in the Windows firewall. This happened with Windows 7 x64 and Windows 10. (Here, I am talking about the ...
2
votes
0answers
152 views

Eventviewer empty logs with English written in Cyrillic Greek

So a while ago I entered my event viewer on windows 10 and I noticed a bunch of weird entries. They look like they where written in English but with the use of Cyrillic and Greek alphabets. I am ...
46
votes
8answers
10k views

Replacing Windows 7 security updates with anti-virus?

Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here. I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
1
vote
3answers
113 views

Is it ill-advised to use the same password for lock screen and full disk encryption (Windows 10 BitLocker)?

I am wondering which attacks can be prevented by using a different password for the lock screen and full disk encryption. The goal is to prevent people from accessing my data. The details of my setup ...
0
votes
1answer
275 views

Can a Windows 10 Local Account password be retrieved

I have heard that Windows (10) local accounts are not that secure. I am however particularly wondering whether the password can be retrieved using any tools. So I am not talking about resetting it ...
0
votes
0answers
50 views

Verify that a Software Restriction Policy (SRP) rule is effectively applied?

I am running Windows 10 Pro and I would like to check the software restriction policies, with timestamps on the logs if possible. Indeed, I found a solution but without timestamping on the logs. ...
80
votes
2answers
19k views

Does Windows 10's telemetry include sending *.doc files if Word crashed?

I'm reading through the extensive description on which data is acquired by Microsoft's telemetry 1 including the following paragraph: User generated files -- files that are indicated as a potential ...
0
votes
1answer
84 views

How to set up the Tor browser on Linux Mint in a VM with a VPN on the Host

(Forgive me, I don't know whether to post this here for in the "Tor" community) I'm brand new to Tor, I understand the basics of how it works and the Do's & Don'ts. I have a Windows 10 computer (...
1
vote
1answer
67 views

Why Bitlocker requires partition on some computers but not all

We have HP desktop computers all identical. I setup Bitlocker encryption on one, no partition was required and the computer was fully encrypted. Second computer gave me a different result, Bitlocker ...
0
votes
1answer
171 views

Strange and unknown user name on Windows 10

Today I was through folder information and, when I switched to the security tab, I observed that there were 5 users listed there. In this list, there was also a user called "yupgyzmhuma". I tried ...
0
votes
0answers
30 views

Remote access to Windows Workstation with credentials, after Windows 10 - 1809

I am a newbie in terms of OS security and I started learning from Windows; in particular I downloaded Win10 virtual machine and I am simulating various attack / defense scenarios on it. I would like ...
0
votes
0answers
49 views

applocker script rules blocking diagnostic troubleshooter by default

My googling came up with nothing useful. I assume others must have ran into this too. If we start the Network Troubleshooter wizard it generates some temp ps1 files that are blocked silently to the ...
0
votes
1answer
208 views

Cmd shuts down computer immediately after windows boots up and logs into the default account/user

as the title suggests, after I login to default/main account which has administration privileges, after desktop loads almost instantly CMD opens and shuts down the computer, only way I found to stop ...
1
vote
1answer
61 views

Are my Windows 10 User Accounts exposed?

I have two user accounts on my PC. About 2 years ago I was doing some testing and left one of my local accounts open to RDP with no password accidentally for about a month. A hacker got in and ...
0
votes
0answers
46 views

Does WinRar leave cache of opened Zip Archives (Nothing extracted)

Downloaded a .zip, via a secure app that deleted the only place it was downloaded (supposedly, who knows if defragmentation left other traces, the download happened by accident, on main OS WIN10, no ...
0
votes
0answers
90 views

Get hash and iv from V file in SAM folder Windows 10

Using information from this link: http://www.insecurity.be/blog/2018/01/21/retrieving-ntlm-hashes-and-what-changed-technical-writeup/#New_Style_Hash_Retrieval I try to do the same thing on VM with ...
0
votes
1answer
106 views

Windows Defender Network Protection component really aggressive, what to do?

Has anyone noticed that the Windows Defender Network Protection component (part of Exploit Guard) can be REALLY aggressive? Sometimes, in order to use a program, app or else, I need to set it to "...
0
votes
1answer
217 views

AES Keys Storage for encrypting hashes of SAM file in Windows 10

Hashes of user account passwords in Windows 10 (like in older versions) are stored in SAM file. Using standard utility pwdump 7 for getting these hashes gives following result: ::LM hash : NTLM hash ...
0
votes
0answers
151 views

How Windows 8 and Windows 10 hash account password?

I need some accurate information about how Windows 8 and Windows 10 perform hashing user account passwords. I know that they are stored in SAM file and NTLMv2 algorithm is used. But while using ...
1
vote
1answer
178 views

Why does windows defender scan my computer multiple times [closed]

Occasionally, Windows Defender sends me a notification that my device was scanned. This occurrence is quite ordinary and boring, but I actually devoted two seconds to reading the entire message once, ...
3
votes
2answers
203 views

Is it dangerous to connect to a public unsecure wifi network a few seconds before connecting to a vpn?

This might be common sense but I just can't seem to get it. I purchased a vpn subscription for security ( I travel a lot therefore I am dependent of public wifi networks ). I have configured all the ...
0
votes
1answer
163 views

Run as different user VS. Run as admin

Can anyone explain what the security implications are between these options and how they should be used? In windows (10) Run as different user Run as administrator
2
votes
1answer
37 views

How to control program permissions and resources in Windows

Is it possible to set specific restrictions/permissions for a program(s) by using any software/feature on Windows? Preferably set before launch and preferably set using a single software/interface, ...
0
votes
0answers
24 views

Sign windows kernel with self signed ca

I want to a security experiment on my machine since I have UEFI now and this allows me to install custom UEFI PK etc. Is it possible that I can install next to the Microsoft PK my own PK in order to ...
1
vote
1answer
96 views

Does an unencrypted disk pose a risk to other encrypted disk's data?

I have three disks, only two are encrypted: A: OS, encrypted B: Main storage HDD, encrypted C: Gaming only SSD, not encrypted. Should I be worried that C: could cache/store sensitive data from A/B ...
4
votes
2answers
271 views

Windows 10 seems to load session before user log in, is it safe?

Last few days I noticed a really annoying problem with Windows 10 (not sure if it is caused by last update). After computer is turned off gracefully, on next startup it loads completely session of ...
0
votes
1answer
74 views

I installed a windows app that stores cookies in a plain text un-encrypted database. Is this a problem?

I have recently installed an application that was developed with Electron that requires I authorize via Google to use the application. I did this at the same time as monitoring the application with ...
6
votes
2answers
825 views

How to prevent Windows Update from suspending BitLocker encrytion?

I was quite shocked today to see that a Windows 10 Pro machine that I recently set up with BitLocker (startup PIN + TPM with full disk encryption) suddenly didn't have BitLocker enabled anymore: And ...
0
votes
1answer
90 views

Does Windows 10 provide sufficient virus and threat protection? [closed]

I am configuring a new laptop with Windows 10 Home and trying to determine if it is necessary to buy one of the big antivirus packages such as Norton, McAfee, etc. Is the security software that comes ...
1
vote
1answer
140 views

WIN 10 hardening: Importance of “Allow system to be shut down without having to log on” policy

I am enforcing a hardening policy on my organization's work stations. One of the policies I removed, under Shutdown, is called "Allow system to be shut own without having to log on". Users started to ...
2
votes
1answer
123 views

How does Malwarebytes intercept web traffic?

I use Malwarebytes and the web filter functionality puzzles me. As far as my research has found, antivirus engines typically use a proxy to intercept web requests which typically there would be ...
2
votes
2answers
169 views

What can someone do with (non-admin) command prompt on a network?

Say that an organization has a closed network - only its own computers can access it. Each of these computers has Windows 10 Enterprise. For obvious reasons, users aren't given administrator ...
1
vote
1answer
255 views

FIDO2 on Windows: Why do I need a TPM?

I just installed the Windows 10 1809 update, which includes support for FIDO2 passwordless sign-in. I own a Yubikey 5, which supports this standard. However, I am not able to set up Windows Hello, a ...
2
votes
1answer
183 views

prevent Ransomware on CIFS shares mounted on Windows 10

I am using Windows 10 with Defender. I follow all the ground rules when dealing with the internet and staying secure. I work in IS so I'm pretty familiar with the various threat-vectors and do a good ...
1
vote
2answers
404 views

How to copy files without copying Alternate Data Streams

I want to backup my infected Windows system's files before formatting it all and reinstalling the system. I would do it from a Linux Live USB. I've heard that one should be careful in copying only the ...
0
votes
1answer
461 views

SRUM (system resource usage monitor) forensics - Windows server?

Having read a couple of articles on the SRUM DB and its use in forensics, I started digging around in Server 2016. The path referenced in the articles is not found in Sever 2016 %systemroot%\System32\...