Questions tagged [windows-10]

An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.

Filter by
Sorted by
Tagged with
1
vote
0answers
26 views

Can a virus infect windows 10 bootable media?

I created a bootable windows 10 usb from my friend's computer. I used the official tool from microsoft. I was dumb enough to not check my friend's computer beforehand (turns out he had Utorrent Web ...
2
votes
1answer
125 views

Is Windows 10 Home more secure than Windows 10 Pro in some way?

I'm planning to do a fresh install of Windows 10 on my mother's computer. Despite it has Pro version right now, I wonder if I should use Home version instead, which is also called Single Language. ...
0
votes
1answer
113 views

Does a Windows 10 endpoint check software installations for malware if they are installed through GPO / SCCM / Software Center?

I'm trying to get a view on what extra security checks our packaging team could do when they download a potentially infected installer from the web before they package an MSI or EXE (assuming that the ...
0
votes
2answers
92 views

Domain admin can monitor all keystrokes. How can I prove that my computer is being targeted? [closed]

I recently found out that my coworker who is domain admin in a large organization told me that he can monitor all keystrokes of any PCs in the domain he'd like and even he can look at any screen to ...
0
votes
0answers
42 views

How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]

My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine. I am ...
1
vote
1answer
352 views

How to run PrintSpoofer in memory from powershell?

PrintSpoofer uses named pipe impersonation to elevate on Windows 10 to SYSTEM from a user with SeImpersonatePrivilege (Local Service, Network Service, Administrator etc.). The compiled version is ...
0
votes
1answer
176 views

Microsoft site iso download flagged by Defender as hacktool while creating bootable USB through rufus [closed]

Iso of 32 bit Windows 10 professional english version downloaded from Microsoft's website by using chrome's developer tools to spoof a chromeOS signature, so as to avoid using Microsoft's download ...
0
votes
0answers
25 views

No UAC appearing for newly installed applications

Recently I have noticed that my system doesn't show the UAC prompt whenever I install some application from another source, I have UAC on and everything is working fine, I also have an administrator ...
2
votes
2answers
470 views

What are the security features of the Microsoft PasswordVault class?

There doesn't seem to be much information on the PasswordVault but it seems to provide for local encryption of credentials. There are references to it in this source code and this blog. The reason I'm ...
1
vote
3answers
176 views

Bought a new Laptop. Can't reset. Is it Safe?

I recently bought a new laptop from a third-party seller on new egg. The seller states that it is "upgraded": "*We sell computers with upgraded configurations. If the computer has been ...
1
vote
1answer
143 views

Windows 10 master key folder empty

I am currently trying to decrypt my files from my old laptop. I have a backup of the user folder of the old laptop and I am trying to find the old user master key to decrypt my files based on mimikatz ...
0
votes
0answers
45 views

TPM and Windows Credential Manager

I'm working on a project that needs to store some encrypted data along with their keys on a Windows 10 computer. The problem is obviously how to protect the keys. My original idea was to use DPAPI ...
3
votes
2answers
376 views

What are the security risks to have admin rights for a user account on Windows 10?

I am considering the security risks to have a standard user added to the Administrators group on an enterprise Windows 10 machine that is dedicated to that user. This is related to security only, so ...
0
votes
1answer
117 views

pwdump8-8.2 correct hash for Microsoft Account Win10

I am having a real issue cracking one NT hash i've pulled from my system for a Microsoft Account. I used - PwDump8.2 I have an admin account unlocked on the system and can access most files. I know ...
0
votes
1answer
220 views

How to set up the Tor browser on Linux Mint in a VM with a VPN on the Host

(Forgive me, I don't know whether to post this here for in the "Tor" community) I'm brand new to Tor, I understand the basics of how it works and the Do's & Don'ts. I have a Windows 10 computer (...
1
vote
0answers
79 views

Does Windows 10 log network activity?

I've been thinking a lot about private browsing recently. Here's a scenario I've been thinking about: Let's say I have a browser installed on my Windows 10 PC called "ChromeFox" (made up, it'...
0
votes
0answers
85 views

Windows 10 user autologin password lost

A while ago I have set up the autologin for my Windows 10 user. I do not know the password anymore. I can login to the system (as has autologin now). But I cannot change the password. Is it possible ...
0
votes
1answer
2k views

Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode

I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
2
votes
1answer
2k views

Is Windows Sandbox a viable alternative to conventional VM solutions considering its design?

The idea of having a fast, disposable VM at the palm of my hand appeals to me very much. It makes adding an extra layer of security to any thing I want to do so easy - just launch the sandbox ...
4
votes
1answer
500 views

Having a code-signed binary, how can I tell if it's signed with an Extended Validation (EV) certificate?

I can't seem to find an answer to this seemingly simple question. Say, on Windows, if I have a binary file: How can I tell if it was signed with an extended validation (EV) code-signing certificate? ...
1
vote
1answer
515 views

Show confirmation popup before running any downloaded program in Windows 10

I often download files either using my browser or by torrenting. Few times, I encountered an attack where the torrented file was called something like movie.mp4.lnk and the target was set to run a ...
0
votes
2answers
169 views

Setting Up MFA and/or best security for personal computer for RDS

I am in the process of converting an older computer into a dedicated machine learning server. I want to be able to RDS into it from my current computer and ideally from anywhere. However, I do want to ...
1
vote
2answers
241 views

Setup guide for Privileged Access Workstation on Windows 10

I am setting up a Privileged Access Workstation (PAW) to access a whitelist of websites. Currently I have been following this guide on Github by unassassinable and applying the latest Windows 10 ...
0
votes
1answer
276 views

security concerns when configuring Windows 10 to automatically log into a Microsoft account-linked user account

I have just configured my Windows 10 desktop PC at home to automatically log into my Windows 10 user account that my Microsoft account is linked to on startup. My desktop is in my bedroom upstairs and ...
0
votes
2answers
126 views

How to securely encrypt my computer and protect it from thieves and others

I did enabled Bitlocker encryption on my Windows 10 Pro Laptop. but it has TPM 2.0 chip installed and Because of that it DOES NOT actually Protecting me as someone JUST NEED TO CRACK 1 PASSWORD (...
0
votes
1answer
3k views

Where is ISRG Root X1 certificate on Windows 10?

Have a look here: https://letsencrypt.org/2018/08/06/trusted-by-all-major-root-programs.html First paragraph says: "As of the end of July 2018, the Let’s Encrypt root, ISRG Root X1, is directly ...
1
vote
2answers
318 views

I installed a windows app that stores cookies in a plain text un-encrypted database. Is this a problem?

I have recently installed an application that was developed with Electron that requires I authorize via Google to use the application. I did this at the same time as monitoring the application with ...
-3
votes
1answer
76 views

Is Windows 10 Insider Build usable within SOC 2 compliance? [closed]

Or Windows 11 pre-release, just cause I'm curious? (By employees if that wasn't implicit.)
1
vote
1answer
887 views

Can Microsoft collect data from inside a virtual machine?

If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not. Just FYI: no, I'm not a nutter that's ...
0
votes
1answer
197 views

How to find discrepancy between exploitable and unexploitable VM

For several years, I have been setting up VMs with 2-3 year old versions of Windows as well as some additional applications to demonstrate two-stage exploits using Metasploit for educational purposes (...
1
vote
1answer
920 views

Can I be hacked on lock screen?

I left my Windows PC for 10 minutes, but I locked it. Nobody knew my password. Is it possible that someone with physical access for 10 minutes to a locked PC can access the computer without shutting ...
0
votes
0answers
63 views

Unsigned Intel item in start-up?

Autoruns shows three Intel items in my Windows 10 19043 start-up Two of them are signed, one of them is not. Unsigned = C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe When I say ...
1
vote
0answers
19 views

Suspicious HEAD http requests [duplicate]

On my Windows 10 machine, I run mitmproxy on localhost:8080. I've changed the system proxy setting to point to my local proxy server. Apart from what I expect to see, I can also see the following HEAD ...
0
votes
0answers
277 views

Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?

I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox. I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
0
votes
1answer
211 views

How to prevent DNS leaks without using a VPN

I use Windows 10, and I've configured my network to use Quad9 in Windows settings. I've also enabled DoH. Now, when I go to ExpressVPN DNS Leak Test webpage to know whether I have DNS leaks or not, it ...
0
votes
1answer
130 views

How do I stop local users from bypassing the UAC on Windows 10?

I'm the admin for a Windows 10 machine with a few local users. While I understand there are other ways to bypass security with access to the physical machine, I'd like to protect against hacks that ...
0
votes
0answers
42 views

AppCertDLLs does not work in GUI apps, why?

I was trying to automatically inject a dll to every process (including GUI) whenever it is started by a user . My DLL hooks DoDragDrop method of winapi and communicates with server to decide allow or ...
5
votes
0answers
319 views

Windows Defender catches Trojan right after clean install

I recently upgraded some desktop PC components (GPU, SSD). I decided to perform a clean install of Windows 10 onto the SSD. I used a USB created using the Installation Media tool provided by Microsoft,...
0
votes
1answer
89 views

Does data recovery of file depends on its extension?

Most free to use data recovery tools (Recuva, Easus, MiniTools) offers good recovery with known file extensions for picutres, videos and documents (.png, .xlsx etc). But lesser known file extensions, ...
1
vote
4answers
2k views

Is it safer to be setup as a user with 'standard' vs 'administrative' privileges in Windows 10?

I am setting up a relatives computer using Windows 10. I am going to create them a 'standard user' account which I will encourage them to use as their every day account. In addition to that I will ...
14
votes
5answers
10k views

Can autoplay USB stick spread virus to windows 8 or 10?

Autoplay was a security hole on older versions of Windows, but can I trust newer version like Windows 8 or 10 to insert USB stick without turning autoplay off?
0
votes
2answers
203 views

Haven't updated my Windows 10 for more than a year

Almost a year ago, I dual-booted Windows 10 and Linux Mint. And since then, I haven't booted into my Windows 10 OS. I still remember that the Wi-Fi adapter was off when I shut my Windows 10 down. Now, ...
1
vote
1answer
233 views

Tricking a windows 10 computer into thinking a USB being plugged in is a mouse for code execution [closed]

Is it possible to "trick" a Windows 10 PC into thinking a flash drive is a mouse to execute code on the machine? If so, how? Note: I'm not trying to do anything malicious. All of this is ...
0
votes
1answer
142 views

How to check TCP sequence number to detect mitm?

I suspect that my router (I'm using an iPhone as router) has been owned and the attacker is making some kind of mitm attack. I suspect also that some html and js code has not been sent to my laptop ...
0
votes
0answers
205 views

Isolate Dual-Boot Windows OS's - Encryption Programs

My machine has Name Model Disk No. Capacity SDD LITEON L8H 0 240 GB HDD HGST 1 1 TB ( 932 Gb ) SDD contains: Windows 10 (for work) HDD contains: Partition 1 / ├─ Files ( text , imgs , video , ...
0
votes
0answers
90 views

Securely deleting Volume Shadow Service (VSS) in Windows 10

Suppose that VSS is enabled and snapshots exist. If I run a program to wipe the free disk space on my drive, would this delete the VSS snapshots? It might do since the program works by filling up the ...
4
votes
1answer
200 views

Is Sleep mode safe?

If a PC has rootkit, when it goes into sleep mode, can rootkit do anything to it while it’s in state of sleeping? Meaning steal data, open programs and basically do anything. Assuming it’s not BIOS ...
6
votes
1answer
6k views

What is Windows Watchdog and what do we know about it?

Today I came across this term "Watchdog", and something about "DPC_WATCHDOG VIOLATION" errors in Windows. I tried googling around but I only found posts on how to fix Watchdog errors, but nothing on ...
9
votes
2answers
441 views

How effective is Windows KDP for exploit mitigation in practice?

Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at ...
1
vote
2answers
1k views

How to copy files without copying Alternate Data Streams

I want to backup my infected Windows system's files before formatting it all and reinstalling the system. I would do it from a Linux Live USB. I've heard that one should be careful in copying only the ...

1
2 3 4 5
7