Microsoft has put a lot of effort in Hyper-V security. Hyper-V, and the whole virtualization stack, runs at the core of many of our products: cloud computing, Windows Defender Application Guard, and technology built on top of Virtualization Based Secur…
I’m fairly well acquainted with the role of conhost in Windows. I am aware of conhostV1.dll and conhostV2.dll so I assume force V1 would force the legacy mode of conhost (as in Pre Win 7 mode when it asked for stuff directly from Kernel s…
I am wondering how to detect a virus or malware or anything that exists on an HDD (I am thinking of external hard drives). Doing a quick search led to these which aren’t quite related:
Virus checking and cleaning an external hdd
Knowing …
Normally I would want to develop an app that encrypts user’s data with symmetric encryption (AES 256) from a password based derived key (PBKDF2).
For a new project, I would like the users to be able to add data to their account without au…
When Daniel
Bohannon released his excellent DOSfuscation
paper, I was fascinated to see how tricks I used as a systems engineer
could help attackers evade detection. I didn’t have much to contribute
to this conversation until I had to analyze a…
When Daniel
Bohannon released his excellent DOSfuscation
paper, I was fascinated to see how tricks I used as a systems engineer
could help attackers evade detection. I didn’t have much to contribute
to this conversation until I had to analyze a…
My objective is to do a port scanner in windows and find the ports which are open. Suppose, I run an application which opens up a port 8000. Now I create a new inbound rule to block all incoming packets on port 8000. So now is the port tec…
I’ve read the documentation for BloodHound, but I’m still unsure, whether BloodHound includes local users (not domain users) as part of the results (or whether it is possible to make BloodHound include such users)?
If BloodHound doesn’t c…
After reading this blog post in which the author lays out arguments against using environmental variables for storing secrets, I am unsure how to proceed with deploying my application.
His primary arguments are as follows:
Given that the…
While setting up my Android account on my phone, I am asked
If you like, you can add this phone’s number to your account ….
..for example you number will be used to:
Reset your password if you forget it
…
How is that in any way secur…
