Friday, April 1, 2016

SmartScreen Demo Pages

This site includes various demo examples of the SmartScreen component within Internet Explorer.

image

http://demo.smartscreen.msft.net/

Never10

Never10 is a portable executable that can configure Windows 7 and Windows 8.1 not to prompt for a Windows 10 upgrade.

https://www.grc.com/never10.htm

image

hping3

hping is a command-line oriented TCP/IP packet assembler/analyzer. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, and the ability to send files between a covered channel.

http://www.hping.org/

AnyDVD alternatives

Below are some alternatives for the AnyDVD application, which allowed the creation of a backup of DVD disks.

http://bitripper.com/

http://www.dvdfab.cn/hd-decrypter.htm

http://www.dvdfab.cn/passkey-lite.htm

http://makemkv.com/

http://www.dvd43.com/

http://www.dvddecrypter.org.uk/

http://www.leawo.com/pro/dvd-ripper.html

http://www.bluerayripper.com/blurayripper.html

http://www.multipelife.com/bytecopy

http://www.pavtube.cn/

http://www.winxdvd.com/dvd-ripper/

PE Capture

PE Capture is a Windows software application useful mainly to capture PE files, such as executables, DLLs and drivers, loaded in the system. It saves a copy of the loaded PE file (renamed as its file hash) on the “Intercepted” folder for further analysis, moreover it logs the execution events to easily find a specific PE file previously captured.

There are two versions of this tool, a completely free version and a second one that runs as a Windows service called PE Capture Service. The service offering is free for personal use but a license is required for deployments in corporate environments.

http://www.novirusthanks.org/products/pe-capture/

http://www.novirusthanks.org/products/pe-capture-service/

https://isc.sans.edu/diary/Hunting+for+Executable+Code+in+Windows+Environments/20745

Office 2016 ADMX templates

The ADMX Group Policy template files for Office 2016 are available at:

https://www.microsoft.com/en-us/download/details.aspx?id=49030

VSAN Hardware Compatibility List Checker

The VSAN Hardware Compatibility List Checker is a free utility that allows you to check if a storage controller on a server is on the VMware HCL.  The requirements are:

HTTPS/443 access to ESXi hosts (interacting with hostd)

TCP/5989 access to ESXi hosts (CIM service secure)

CIM provider for HP or LSI controller

https://labs.vmware.com/flings/vsan-hardware-compatibility-list-checker

Windows 10 evaluation virtual machine

Windows 10 evaluation virtual machines are available in different formats such as VMware and VirtualBox.

https://dev.windows.com/en-us/downloads/virtual-machines

Slmgr Information

The slmgr.vbs command can be used to modify or remove Windows licensing parameters.  To use the command, launch an elevated command prompt.

slmgr.vbs /dli –> the edition of Windows, part of the product key so you can identify it, and whether the system is activated.

slmgr.vbs /dlv –> display more detailed license information

slmgr.vbs /xpr –> display the expiration date of the current license

image

slmgr.vbs /ipk #####-#####-#####-#####-##### -> change the product key

slmgr.vbs /ato –> force Windows to attempt an online activation

Wednesday, March 2, 2016

Windows 10 and WindowsUpdate.log

The WindowsUpdate.log file is still present within Windows 10, but no data is contained within it.

windows10_update_log_1

To view dates and times of update traffic, launch an elevated PowerShell session and use the cmdlet Get-WindowsUpdateLog.

windows10_update_log_2 

A .log file should be created on the desktop of the account being used.

windows10_update_log_3

windows10_update_log_4

To “clean up” the output, use the following command:

(Get-Content "WindowsUpdate.log") -notmatch "1600/12/31" | Out-File -Encoding ASCII "WindowsUpdateCleaned.log"

windows10_update_log_5

windows10_update_log_6

Additional details on this topic may be found at https://blogs.technet.microsoft.com/askcore/2015/09/28/cross-post-windows-10-windowsupdate-log-and-how-to-view-it-with-powershell-or-tracefmt-exe/.