Questions tagged [windows-7]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
29 views

Using WinSCP to connect Windows Client to Linux server [migrated]

I am trying to understand how to set up an SFTP connection between Windows 7 PCs (yes, these PCs will be supported through part of next year) to a Linux Server. I think I'm finally getting it - but ...
0
votes
0answers
24 views

Sysmon fails to use config file in Windows 7

Sysmon fails to use EventFiltering properties written in config file. I am trying to use,for example, this kind of config to detect network activity from powershell process: <Sysmon schemaversion="...
0
votes
1answer
58 views

Blocking mimikatz on the OS level?

I want to know under which case would Mimikatz still run despite disabling WDigest? Whether wdigest is set to 1 or 0, mimikatz still worked. (tested on Windows 7, 8, 2012) Is there a better way to ...
1
vote
2answers
99 views

What causes Windows security logs saying an attempt was made to reset an account's password?

This falls under the category of eliminating what might be normal activity from my attention. I'm looking at Windows 7 security event logs. I don't have context to know if the following event is a ...
0
votes
0answers
64 views

Does psexec exist by default on all Windows 7 machines?

During a review of the registry editor, I found psexec and psloggedon installed upon my personal laptop. A few times, I have also observed my anti-virus restricting communication with a external ...
1
vote
1answer
89 views

How can I create a hidden Administrator account in a public computer?

After my journey for finding a way to create a truly private user account in a public computer (the setup I'm trying to do this on is detailed in this other question) ended in an epic fail I'm now ...
65
votes
4answers
9k views

Is an up-to-date browser secure on an out-of-date OS?

Windows 7 support will end on January 14, 2020. Assuming that after that day I still use an updated browser, is it true that I'm still safe? Can it "patch" the OS-based security holes? Minor question:...
1
vote
0answers
104 views

The last logon time of the Administrator user in Windows 7 system is prior to the OS installation date, why?

What may be the reason behind the fact that in a digital forensics report (FSL report) of a computer's hard disk, the last logon time of the Administrator user in Windows 7 system is prior to the OS ...
0
votes
3answers
187 views

Can you detect that new files were added to a hard drive that was removed and replaced?

The internal HDD was removed from my laptop (with Windows 7) and connected to another machine to tamper with. Some new files were also created/copied by the mischief maker. After the tampering was ...
2
votes
4answers
208 views

Is it possible to create a truly private user account in a public computer?

In my college computer that runs Windows 7 Professional SP1 I have an administrator account. I have full access to the entire computer and the files of every other account that's signed up. The ...
9
votes
2answers
2k views

How to prevent Firefox and Chrome from opening ports in the firewall?

I have noticed that Firefox and Chrome have opened ports for unsolicited inbound traffic in the Windows firewall. This happened with Windows 7 x64 and Windows 10. (Here, I am talking about the ...
50
votes
10answers
13k views

Replacing Windows 7 security updates with anti-virus?

Microsoft has announced Windows 7 will no longer be receiving updates after January 14, 2020: Here. I hate windows 10's forced updates and telemetry so I have always stuck with Windows 7, but it may ...
0
votes
2answers
364 views

Why windows 7 ulitmate can't run exe file? Facing NTVDM CPU error?

I have created a malicious .exe file with the use of msfvenom in my local environment. And I created a listener by using multi/handler in Metasploit I send it to Windows 7, but when I run this test....
6
votes
1answer
894 views

I'm hacked without telling anyone my ip [duplicate]

I have a pc with static IP bought from my ISP and RDP enabled. I was using this PC for development and didn't tell or use it for any communication purpose so it's not possible that someone knew about ...
4
votes
1answer
278 views

How to check for security breach after a potential physical home intrusion

My family member has reason to believe that someone entered their house last night although they cannot be certain because they only have circumstantial evidence: In the morning they found a light ...
3
votes
3answers
217 views

Using a windows partition as a decoy

I'm interested in setting up a laptop that dual boots Windows 7 and openSUSE. The plan is to encrypt the openSUSE partition and require a USB thumb drive with the encryption key for it to boot. Where ...
0
votes
3answers
6k views

How can I track executed PowerShell commands within a network?

I wanto to track PowerShell commands which are executed by users in the intranet. How can I do this? I need the user's information and their executed commands. Is it possible? Edit 1: I guess I can ...
3
votes
3answers
519 views

How to prove a false positive

I was notified by my university's infosec team that one of my lab's computers had been infected by ransomware. They shut down the computer's network connections using Crowdstrike and are insisting ...
5
votes
3answers
2k views

No Debugger, but a ton of “DbgUiRemoteBreakin” threads

I noticed that just about every running process on my Windows 7 desktop - whether it be explorer.exe, lsm.exe, winlogon.exe, or firefox.exe has at least 1 (usually 6+) of the following thread: "ntdll....
4
votes
2answers
5k views

Windows 7 consent.exe attempting to access the internet

Looking at Firewall logs, I see that consent.exe, which is responsible for the Windows 7 UAC UI, attempts to connect to the internet. I have verified the file is a genuine executable provided by ...
1
vote
2answers
2k views

MFA for Windows 7

My organisation is hoping to implement MFA for Windows. Our end users are generally not permitted to have their cellphones on them which means that many of these MFA apps cannot be used. We've tried ...
6
votes
1answer
26k views

Understanding Windows local password hashes (NTLM)

I have recently dumped some hashes from my local machine because I'm trying to understand the process in which Windows 7 hashes it's passwords. I have discovered my local password hash that looks (...
0
votes
1answer
823 views

Malware and Windows 7

I am trying to going into a new military occupational speciality for the cyber community and I am having some difficulty with some of the questions on a questionnaire. The two questions I am having ...
2
votes
2answers
318 views

How to protect from wannacry on home wifi network

I am running an outdated Windows 7 and am not able to update it due to some reasons. I wanted to know how vulnerable is my Windows to WannaCry from the home wifi network connection. What would you ...
1
vote
1answer
223 views

Analyze a Windows temporary file

Short version: Is there any way to analyze a temporary file from the C:\Windows\Temp folder, if is there any code, process, or to what it is associated. Long version: In a Windows 7 computer, the ...
3
votes
1answer
4k views

gpg4win kleopatra doesn't ask for passphrase on subsequent runs

Am using gpg4win kleopatra for encrypting files. After bootup when I try to decrypt a previously encrypted file, it asks for a passphrase as expected. But after some time, if again I try decrypting a ...
1
vote
1answer
60 views

Logging scarce outbound communication

I have the following predicament. I am tasked with making sure our client's workstations are squeaky clean from a Malware point of view. We have been blessed with Websense as a malicious outbound ...
4
votes
2answers
118 views

Is it safe to install phone driver?

When I connect most Android phones to a Windows 7 computer via USB, Windows will install the appropriate drivers for the device. My (possibly incorrect) understanding is that those drivers come with ...
4
votes
2answers
377 views

Fresh install of Windows 7 vulnerable?

A friend got a new Windows 7 computer. His plan was to connect it to the internet and download all the Windows updates. I told him a better strategy would be to download the patches from another ...
20
votes
3answers
3k views

Some folders in the PATH variable are writable by anyone. Dangerous or not?

I noticed that some folders in the PATH environment variable (e.g. C:\Python) give write privileges to anyone on the machine, including users without Admin rights. I understand that people can ...
1
vote
1answer
398 views

Question about Trusted Service Paths

I am studying Computing Security, and I was reading this article about Windows privilege escalation. I tried to run the following command on my own Windows machine to see if I had some "Trusted ...
1
vote
0answers
186 views

There's a bunch of TCP connections on my PC to '9gag'

My computer has a bunch of TCP connections to the website 9gag. I used to visit that website a lot a while back but I have not used it in a long time. What's more, I blocked that website from my own ...
1
vote
3answers
4k views

Does Hibernate feature pose any security threat?

My organization previously allowed its employees to hibernate their devices(Start>Power>Hibernate). Sometime later, the 'Hibernate' option disappeared from the Start menu. Some employees started using ...
0
votes
1answer
220 views

Can I use something other than AES 128 to store my PSCredential?

From what I've read the ConvertTo-SecureString will store a password with AES-128 (which as I understand it is cracked)...is it possible to use more bits? I've read in Get-Help the following, but I ...