Inspecting registry with AutoRuns

Ever wondered how many programs start automatically with your Windows ?. How these programs slow down your PC, use Sysinternals AutoRuns utility to inspect your registry.

Autoruns

Comments

Post a Comment

Popular posts from this blog

Script to find memory usage on Ubuntu

This simple script will show the total memory, free memory and percentage of memory used. Have tested it on Ubuntu 14/16 but will work on CentOS as well #!/bin/bash freemem=$(($(free -m |grep "buffers/cache:"|awk '{print $4}'))) totalmem=$(($(free -m |awk 'NR==2 {print $2}'))) usage=$(($totalmem-$freemem)) echo "Memory used: $usage" echo "Total memory: $totalmem" usage=$(($usage*100 / $totalmem)) echo "Usage percentage: $usage" echo "Free memory: $freemem" echo "$TIMESTAMP $totalmem $usage $freemem"
Read more

What is a SIEM solution

  What is a SIEM solution I am updating my blog after quite a while and will try to talk about Cyber Security. In today’s blog we are going to talk about a term used commonly in Cyber Security, which is SIEM. SIEM stands for “Security Incident and Event Management” It is a combination of security information management and security event management. SIEM keeps track of the security posture of an organization by collecting security related data of information an organization in form of logs and store them for analysis for upcoming threats and it also monitors the infrastructure of an organization (both on premises and cloud based.) There are different SIEM solutions offered, some of the common and popular ones are Rapid7, Sentinel One, Splunk, ActZero. Most of these solutions can also integrate with next generation EDR/XDR/MDR solutions like Crowd Strike as well. SIEM is the center of organizations security operations (SOC).  Some of the salient features of a...
Read more

Implementation of central authentication from Active Directory for Samba Shares

You have configure Kerberos and Winbind to join Active Directory. Configure Samba to use ADS in globals [global] workgroup = ******* realm = ******.COM.PK server string = ***** security = ADS map to guest = Bad Uid password server = ip adrress of Domain Controller log file = /var/log/samba/log.%m max log size = 50 idmap uid = 100000-200000 idmap gid = 100000-200000 cups options = raw [homes] comment = Home Directories read only = No browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [Test] path = /d/infopool valid users = rahat.khan, *******\Administrators, *****\rahat.khan admin users = ******\rahat.khan write list = ******\rahat.khan acl group control = Yes guest ok = yes
Read more