Fundamentals of Cyber security Operations - Week 2 Flashcards
Which software is used for exploring processes in Windows ?
SysInternals Suite , process explorer
What is thread ?
A thread is a unit of execution in process
What is an handle ?
A handle is an abstract reference to memory block or objects managed by an Operating System
How to view handles of a process ?
We have to use sysinternals processexplorer tool , Navigate to view, then lower pane view
What is an Windows registry ?
The windows registry is a hierarchical database that stores most of the operating systems and Desktop Environment configuration settings
How to open registry editor
In search window , search for regedit
How many hives are in registry editor
Total 5 hives are in registry editor
Which Registry hive stores hardware information use at boot-up ?
HKEY_CURRENT_CONFIG
Which registry hive store settings and configurations for all users
HKEY_USERS
Which registry hive Store local computer configuration
HKEY_LOCAL_MACHINE
Which registry Hive stores settings and configuration of current user
HKEY_CURRENT_USER
How to change a end user licence agreement key value of process Explorer.
Click to select Process Explorer in HKEY_CURRENT_USER > Software > Sysinternals > Process Explorer. Scroll down to locate the key EulaAccepted.
Change the 1 to 0 for Value data. The value of 0 indicates that the EULA was not accepted. Click OK to continue.
Which tool is used in Windows to write automated scripts ?
Powershell
How to know the alias of commands in PowerShell ?
Get-Alias dir
Which command is used in PowerShell to see live network traffic.
netstat
How to display routing table in PowerSwell ?
netstat -r
How to empty Recycle bin using powershell ?
Open PowerShell & type clear-recyclebin
Types of Memory for processes in Windows
There are two main types of memory usage:
1. working set
2.private working set.
The private working set is the amount of memory used by a process that cannot be shared among other processes, while working set includes the memory shared by other processes.
What is an Task Manager ?
The Task Manager is a system monitor program that provides information about the processes and programs running on a computer. It also allows the termination of processes and programs and modification of process priority.
How to open System Logs in Event Viewer ?
Computer Management >System Tools > Windows Log >System
When was vi editor is created ?
vi editor is created in 1976
What are the updated version of vi editor?
vim is the person of vi editor
Which file contains configuration settings of user terminal
bashrc contains configuration for the terminal
Which configuration file is responsible to define the prompt structure of the prompt displayed by the terminal
bashrc file
For example, the line PS1=’[\e[1;32m][\u@\h \W]$[\e[0m]
Which directory contains configuration files related to system wide services ?
/etc
What is the name of text editor in arch linux ?
SciTE