THM Windows Fundamentals 2 - grunt92/IT-Sec-WriteUps GitHub Wiki

Introduction

Read above and start the virtual machine.

No answer needed

System Configuration

What is the name of the service that lists Systems Internals as the manufacture?

Search for msconfig in the deployed Windows-machine. Select the "System Configuration"-app and switch to the "Services"-tab. Sort the services by Manufacturer and look for "Systems Internals" to find the answer.

PsShutdown

Whom is the Windows license registered to?

Switch to the "Tools"-tab. Select the "About Windows"-tool and press the "Launch"-botten.

Windows User

What is the command for Windows Troubleshooting?

Select the "Windows Troubleshooting"-tool and look at the "Select command"-field for the answer.

C:\Windows\System32\control.exe /name Microsoft.Troubleshooting

What command will open the Control Panel? (The answer is the name of .exe, not the full path)

Go to the "System Properties"-Tool.

control.exe

Change UAC Settings

What is the command to open User Account Control Settings? (The answer is the name of the .exe file, not the full path)

Look for the "Change UAC Settings"-tool: UserAccountControlSettings.exe

Computer Management

What is the command to open Computer Management? (The answer is the name of the .msc file, not the full path)

compmgmt.msc

At what time every day is the GoogleUpdateTaskMachineUA task configured to run?

Launch the "Computer Management"-tool and go to the "Task-Scheduler". Go to the active tasks and find the "GoogleUpdateTasksMachineUA".

6:15 AM

What is the name of the hidden share?

Go to the "Shared Folders" in the "Computer Management"-tool. Select the subfolder "Shares" and look for the share without a description.

sh4r3dF0Ld3r

System Information

What is the command to open System Information? (The answer is the name of the .exe file, not the full path)

Close the "Computer Management"-tool. Look for the "System Information"-tool in the "Tools"-tab.

msinfo32.exe

What is listed under System Name?

Launch the "System Information"-tool. Look up the System Name in the System Summary. THM-WINFUN2

Under Environment Variables, what is the value for ComSpec?

Expand the "Software Environment" section and select the "Environment Variables".

%SystemRoot%\system32\cmd.exe

Resource Monitor

What is the command to open Resource Monitor? (The answer is the name of the .exe file, not the full path)

Close the "System Information"-tool and search for the "Reasearch Monitor" in the "Tools"-tab of the "System Configuration".

resmon.exe

Command Prompt

In System Configuration, what is the full command for Internet Protocol Configuration?

C:\Windows\System32\cmd.exe /k %windir%\system32\ipconfig.exe

For the ipconfig command, how do you show detailed information?

Open the command-line tool. Enter ipconfig --help and look for the required information.

ipconfig /all

Registry Editor

What is the command to open the Registry Editor? (The answer is the name of the .exe file, not the full path)

Close the command-line tool and look for the "Registry Editor" in the "Tools"-tab of the "System Configuration".

regedt32.exe

Conclusion

Read above.

No answer needed