When trying to run an EXE, MSI, BAT, CMD, or other executable file type from a local drive or shared network folder in Windows, you may see the Open file…
The Server Message Block (SMB) is a client-server network protocol used in Windows networks to provide remote access to shared files, printers, other network resources, and for interprocess communication. TCP…
Windows saves (caches) domain user credentials locally so users can log in without domain access if needed. This feature enables users to log on to their computers even when AD…
This article, part of a Windows security series, explains a simple method to dump the passwords of all active Windows users using the Mimikatz tool.
This guide explains how to upgrade Windows 10 or 11 Home editions to a Professional or Enterprise version, without reinstalling the operating system and keeping all installed programs, settings, and…
Hi, admin! I’m trying to turn on Windows Defender on Windows 10, but in the “Windows Defender Security Center”, the “Virus & threat protection” component has the message: “Threat service…
File Explorer process always runs with minimal (non-elevated) privileges in Windows. Even if you click the C:\Windows\explorer.exe executable file and try to start it in the ‘Run as administrator’ mode,…
Windows automatically creates a hidden System Volume Information directory in the root of each connected NTFS drive (whether a local HDD/SSD drive or a removable USB drive). The size of…
Broadcast protocols NetBIOS over TCP/IP, LLMNR, and mDNS (Multicast DNS) are used to resolve names in Windows networks where there is no (unavailable) DNS server (typically, these are home or…
Information security best practices require the computer screen to be locked when the user is inactive (idle) for some time. A Windows user can lock the computer screen themselves (using…