WinNT SYSTEM
<a href="http://it.rising.com.cn/safety/safetyschool/ywyb/020124cmd.htm" target="_blank"> Windows 2000 the "CMD" prompt! -
Securing Microsoft Services @SECURITYFOCUS
arstechnica.com/tweak/win2k/security/begin-1.html
HOME : arstechnica.com
FAT - file allocation table @NEWORDER
@Microsoft Tech Net
http://www.microsoft.com/technet/security/iis5chk.asp - Description des ports ; support.microsoft.com/support/kb/articles/Q289/2/41.ASP - AGP Program May Hang When Using Page Size Extension on Athlon Processor - support.microsoft.com/support/kb/articles/Q270/7/15.ASP - HOME : microsoft.com/technet
W2K SAM FILE DESCRIPTION - Ce fichier Windows contient
la sécurité NTFS
written by NullAck
member of neworder.
- online.securityfocus.com/library -
<a href="http://www.rising.com.cn/" target="_blank"> Directory of C:\WINNT\system32 - www.rising.com.cn
<a href="http://www.ntfaqfr.com/ntfaq/installjc2.htm" target="_blank"> Comment transformer une application en service ? - HOME : ntfaqfr.com
<a href="http://herve-pc.cnrs-orleans.fr/Security/Win2k/TCPIP/Win2k_TCPIP1.htm" target="_blank"> Informations détaillées concernant l’implémentation de Microsoft Windows 2000 TCP/ IP - Herve Chaudret, C.N.R.S. - C.R.M.H.T. - Responsable Informatique au Centre de Recherches sur les Matériaux à Haute Température (C.N.R.S.)
MS Windows 2000 TCP/IP Implementation
Details
hosted by secinf.net - White
Paper By Dave MacDonald and Warren Barkley
<a href="http://www.siesystems.com/w2k_registry_tcp.htm" target="_blank"> W2k Registry TCP/IP Configuration Parameters - The TCP/IP protocol suite implementation for Windows 2000 obtains all of its configuration data from the registry. This information is written to the registry by the Setup program. Some of this information is also supplied by the Dynamic Host Configuration Protocol (DHCP) client service, if it is enabled. This appendix defines all of the registry parameters used to configure the protocol driver, Tcpip.sys, which implements the standard TCP/IP network protocols.
PC911 > How-To > Safe Computing > Securing Windows
Windows Security Guide I - Tech Help Center has compiled a list of some necessary programs to secure your Windows computer.
opentechsupport.net/forums/showthread.php?threadid=6036 - THE WINDOWS 2000 CORPORATE WORKSTATION PERFORMANCE GUIDE - written by Brian Swales (Kdr Kane) - February 20, 2002
The Sysinternals web site provides you with advanced
utilities, technical information, and source code related to Windows 9x, Windows
Me, and Windows NT/2000 internals that you won't find anywhere else. Mark Russinovich
and Bryce Cogswell alone write and update everything here.
PROCESS
EXPLORER - sysinternals.com/ntw2k/freeware/procexp.shtml
sysinternals.com/ntw2k/source/misc.shtml
blkviper.com - My Windows 2000 Professional Services Configuration 411, Your Mileage May Very...
Microsoft .Net by DrPizza from ArsTechnica.com
Partager sa connexion avec le RRAS de Windows 2000 @ Hifocus.net
http://forensics.org/ - IIS Security and Programming Countermeasures - Securiteam comments
Securing
Microsoft Windows 2000 Server solution guide - @Micro$oft.com
http://www.windows-help.net/windows2000/secure-server.html
rpcss.htm Behavior
RPCSS opens ports on your machine (usually 135 as well
as some "random" ports in the low 1000s) and proceeds to try and access
the Internet, setting off programs such as Zone Alarm and firewalls with its
suspicious activity. While the RPCSS program is probably supposed to serve some
kind of legitimate purpose, it has nonetheless been cited for numerous stability
problems as well as security concerns. (Not to mention the unverified, but fairly
wide-spread, other allegations...) - @Counterexploitations
cexx.org the buck stops here!
WinTasks Process Library - /stisvc/
GNUWin -- Open your Windows !
Handle is a utility that displays information about open handles for any process in the system. You can use it to see the programs that have a file open, or to see the object types and names of all the handles of a program. You can also get a GUI-based version of this program, Process Explorer, here at Sysinternals.
w2k-iis5_by_nsa.pdf
Win2K Services - Appendix A - PDF
Win2K Services - Micro$oft - DOC
The
Misery of Socket Pooling - isaserver.org
All of these problems are related to a little known issue
with IIS 5.0. The current version of IIS uses something called Socket Pooling
which, if I understand the issue correctly, putatively improves performance.
While it may improve performance, it completely whacks your ability to publish
services on the ISA Server itself.
What Socket Pooling does is allow a particular service to listen on all IP addresses
on a particular computer. For example, if you have one internal IP address bound
to the internal interface and two IP addresses bound to the external interface,
then Socket Pooling will allow the service, such as the IIS 5.0 FTP Service,
to listen on all three IP addresses.
Couper son fichier .avi
~~ (maj le 12/01/03)
Thx To GlloQ.