Saturday, January 2, 2016

GWX Control Panel

GWX Control Panel is a free program that you can use to do the following on Windows 7 and Windows 8: Remove the "Get Windows 10" icon that appears in your notification area. Prevent your Windows Update control panel from upgrading your computer to Windows 10. Prevent your computer from secretly downloading Windows 10 installation files. Detect and remove the hidden Windows 10 installation files if they're already on your PC.

http://ultimateoutsider.com/downloads/

A portable version of the application is available.

image

Open Live Writer

Open Live Writer is a new open-source version of the original Windows Live Writer application.

http://openlivewriter.org/

openlivewriter

Zarp

Zarp is a network attack tool focused around the exploitation of local networks. This does not include system exploitation, but rather abusing networking protocols and stacks to take over, infiltrate, and knock out.

https://github.com/hatRiot/zarp

SprayWMI

SprayWMI is a method for mass spraying Unicorn PowerShell injection to CIDR notations.  The initial WMI communications use TCP port 135 and afterwards a random port is negotiated. Since WMI and RPC services are often used for remote administration and administration tools, it is common to see these ports open and unfiltered on internal networks.

https://github.com/trustedsec/spraywmi

Horizon Toolbox

VMware Horizon Toolbox is a Web portal that acts as an extension to View Administrator in VMware Horizon version 6.

https://labs.vmware.com/flings/horizon-toolbox

Configure telemetry with Windows 10

The link below contains details on the various telemetry settings within Windows 10 and the Group Policy/Registry paths for configuration.

https://technet.microsoft.com/en-us/library/mt577208(v=vs.85).aspx

MalwareBytes Junkware Removal Tool

MalwareBytes has an utility named the Junkware Removal Tool that attempts to remove adware-based applications such as toolbars within web browsers.  The download is a single executable that does not require installation.

https://www.malwarebytes.org/junkwareremovaltool/

image

image

Windows 10 1511–Default Printer

With the 1511 update to Windows 10, a change was made how the default printer is automatically configured.  The last printer used will become the default selection.  To disable this feature, access Settings –> Devices –> Printers and scanners.  Turn off the “Let Windows manage my default printer” option.

windows_10_default_printer 

The Registry Key for this parameter can be found at:

HKEY_Current_User\Software\Microsoft\Windows NT\CurrentVersion\Windows\LegacyDefaultPrinterMode

Set the Data value to "1" to return to the old behavior.

Saturday, December 5, 2015

Windows 10 - Compact OS

Windows 10 deploys a compression algorithm that enables the operating system to reclaim 1.5GB of storage on 32-bit systems, and up to 2.6GB in 64-bit Windows. This system is called Compact OS, and depending on a number of variables, such as processor speed, available RAM, and disk type and size, Windows automatically enables compression of system files during the upgrade process. If Compact OS is enabled, Windows Universal Apps are compressed to save space.

To determine if Compact OS is enabled on your system, open a command prompt and type compact /CompactOS:query.

image

If you want to manually enable or disable Compact OS, open a command prompt with administrator privileges, and run compact /CompactOS:always or compact /CompactOS:never.

Zero Assumption Recovery or ZAR

Zero Assumption Recovery or ZAR is a data recovery application.  A demo is available that allows recovery of images from sources such as SD cards.

http://www.z-a-recovery.com/