Collaborate Disseminate
Many enterprises run service on production servers as SYSTEM without considering the risk that might arise from this configuration, what is the biggest risk associated with it? and how would attackers exploit this kind of configuration?
… Continue reading What is the main risk of allowing services to logon as NT AUTHORITY\SYSTEM?
I downloaded MongoDB 3.4 from the MongoDB website here
When I run the .msi file to install, I am prompted with the following screen asking me if I trust a39adfe.msi
A Google search for a39adfe.msi turns up nothing.
Does an… Continue reading Suspicious app name in Windows 10 permission prompt
When I open up task manager, I see windows processes(services) at the bottom. As a programmer, I want to create a windows process/service for security research(windows defender) but I have some questions,
when an executable … Continue reading Windows Defender and Windows Processes
When I open up task manager, I see windows processes(services) at the bottom. As a programmer, I want to create a windows process/service for security research(windows defender) but I have some questions,
when an executable … Continue reading Windows Defender and Windows Processes
I’ve made an observation while writing a program which writes a key to Credential Manager for later use. The problem is Credential Manager seems to work remote logins only if we login via Remote Desktop Connection but not via… Continue reading Does Windows block access to Credential Manager for remote connections?
I don’t want domain users to install new software so I have to take away the admin privileges. But certain applications require admin privileges for users. How can I sort this?
Can I create a new local group and grant certai… Continue reading Grant domain users Admin privileges for certain application? [migrated]
I know that windows source code is proprietary so how do hackers and others know what are the available exploits in windows so that the viruses can take their advantage.
Continue reading How are viruses made for windows? [on hold]
According to http://mftbug.surge.sh [ed note: potentially dangerous link on the page], any web page can attack a user through the browser without knowledge about the user. How can we stop this default behavior?
Continue reading What can I do to prevent my web browser from accessing local files?
We require a method to run a process on a users machine whereby a local user cannot kill this process (from task manager or otherwise). Is there a way to make this application a system process or make it un-killable.
I have … Continue reading Securing a process from local users
A friend of mine works in an organisation and one fine day realised that he has local admin access on his machine. He swear to me that he didn’t have the privilege initially and needed to raise requests for installing any sof… Continue reading How to find who granted local admin privileges to a user?