Microsoft Windows Hardening
What is the startup type of App Readiness service in the services panel?
Manual
Open Registry Editor and find the key “tryhackme”. What is the default value of the key?
{THM_REG_FLAG}
Open the Diagnosis folder and go through the various log files. Can you find the flag?
{THM_1000710}
Find the name of the Administrator Account of the attached VM.
Harden
Go to the User Account Control Setting Panel (Control Panel > All Control Panel Items > User Accounts). What is the default level of Notification?
Always Notify
How many standard accounts are created in the VM?
0
Open Windows Firewall and click on Monitoring in the left pane - which of the following profiles is active? Domain, Private, Public?
Private
Find the IP address resolved for the website tryhack.me in the Virtual Machine as per the local hosts file.
192.168.1.140
Open the command prompt and enter arp -a. What is the Physical address for the IP address 255.255.255.255?
ff-ff-ff-ff-ff-ff
Windows Defender Antivirus is configured to exclude a particular extension from scanning. What is the extension?
.ps
A Word document is received from an unknown email address. It is best practice to open it immediately on your personal computer (yay/nay).
nay
What is the flag you received after executing the Office Hardening Batch file?
{THM_1101110}
A security engineer has misconfigured the attached VM and stored a BitLocker recovery key in the same computer. Can you read the last six digits of the recovery key?
377564
How many characters does the BitLocker recovery key have in the attached VM?
48
A backup file is placed on the Desktop of the attached VM. What is the extension of that file?
.bkf
What is the CVE score for the vulnerability CVE ID CVE-2022-32230?
7.8