THM Windows Fundamentals 2 - grunt92/IT-Sec-WriteUps GitHub Wiki
Introduction
Read above and start the virtual machine.
No answer needed
System Configuration
What is the name of the service that lists Systems Internals as the manufacture?
Search for msconfig in the deployed Windows-machine. Select the "System Configuration"-app and switch to the "Services"-tab. Sort the services by Manufacturer and look for "Systems Internals" to find the answer.
PsShutdown
Whom is the Windows license registered to?
Switch to the "Tools"-tab. Select the "About Windows"-tool and press the "Launch"-botten.
Windows User
What is the command for Windows Troubleshooting?
Select the "Windows Troubleshooting"-tool and look at the "Select command"-field for the answer.
C:\Windows\System32\control.exe /name Microsoft.Troubleshooting
What command will open the Control Panel? (The answer is the name of .exe, not the full path)
Go to the "System Properties"-Tool.
control.exe
Change UAC Settings
What is the command to open User Account Control Settings? (The answer is the name of the .exe file, not the full path)
Look for the "Change UAC Settings"-tool: UserAccountControlSettings.exe
Computer Management
What is the command to open Computer Management? (The answer is the name of the .msc file, not the full path)
compmgmt.msc
At what time every day is the GoogleUpdateTaskMachineUA task configured to run?
Launch the "Computer Management"-tool and go to the "Task-Scheduler". Go to the active tasks and find the "GoogleUpdateTasksMachineUA".
6:15 AM
What is the name of the hidden share?
Go to the "Shared Folders" in the "Computer Management"-tool. Select the subfolder "Shares" and look for the share without a description.
sh4r3dF0Ld3r
System Information
What is the command to open System Information? (The answer is the name of the .exe file, not the full path)
Close the "Computer Management"-tool. Look for the "System Information"-tool in the "Tools"-tab.
msinfo32.exe
What is listed under System Name?
Launch the "System Information"-tool. Look up the System Name in the System Summary. THM-WINFUN2
Under Environment Variables, what is the value for ComSpec?
Expand the "Software Environment" section and select the "Environment Variables".
%SystemRoot%\system32\cmd.exe
Resource Monitor
What is the command to open Resource Monitor? (The answer is the name of the .exe file, not the full path)
Close the "System Information"-tool and search for the "Reasearch Monitor" in the "Tools"-tab of the "System Configuration".
resmon.exe
Command Prompt
In System Configuration, what is the full command for Internet Protocol Configuration?
C:\Windows\System32\cmd.exe /k %windir%\system32\ipconfig.exe
For the ipconfig command, how do you show detailed information?
Open the command-line tool. Enter ipconfig --help
and look for the required information.
ipconfig /all
Registry Editor
What is the command to open the Registry Editor? (The answer is the name of the .exe file, not the full path)
Close the command-line tool and look for the "Registry Editor" in the "Tools"-tab of the "System Configuration".
regedt32.exe
Conclusion
Read above.
No answer needed