Microsoft Windows 9X/NT/2K/2K03/XP/Vista/etc. Administration and Security

• Security Guides and HowTos
  • Windows Vista Security Guide, Microsoft
  • Fundamental Computer Investigation Guide For Windows
  • How To Set Up VNC Over SSH On Windows XP, by Erik J. Heels
  • Intro to Securing Your Windows Files
  • Overview of Active Directory Security concepts
  • Windows 2000 Security Recommendation Guides, National Security Agency, June 1, 2001
  • Secure FTP transfers via Secure Shell Tunnelling (Using Teraterm for Windows and WS_FTP as an example)
  • NET USE (usable for removing stored passwords from shares, etc.)
  • Wim's BIOS Page: Everything you want to know about BIOS
  • NSA Guidelines for Securing Windows NT Networks (see also other Trusted Information Systems research and papers)
  • Remapping Ctrl and Caps Lock in Windows! (I hate keyboards that have it wrong!)
  • Articles on debugging from Microsoft's Knowledgebase
• Security Related Tools
  • Ultimate Boot CD for Windows
  • NetBus
  • Back Orifice
  • NTInternals
  • Known NT exploits
  • Running Sleuthkit and Autopsy Under Windows, by Charles Lucas, June 11, 2004
  • Debugging Tools, loranbase.com
• Rob's Zone Alarm Page (information about Zone Alarm log file contents)
• Secure Routine Windows to UNIX Web updating using tunnelling via Teraterm and Rsync
• Installing ssh and rsync on a Windows machine
• TTSSH: An SSH Extension to Teraterm
• Securing your UNIX connections with the secure shell (ssh)
• Windows NT Utilities by Gordon Chaffee (includes Windows 95/NT ssh/scp port)
• NT Systems and Services, Stanford University
• A *REAL* NT Rootkit, patching the NT Kernel, Phrack Magazine, Issue 55, Article 5
• NT Objectives was mentioned in a DEFCON talk on forensics. They produce a free toolkit (that let's you do the same thing as find does for free on Unix!)
• Microsoft Security Advisor
• John Kozubik's NT Security Column at Network Command
• How to Configure a Firewall for Windows NT and Trusts Article ID: Q179442
• WinNT, Terminal Server, & Exchange Services Use TCP/IP Ports Article ID: Q150543
• "CIFS: Common Insecurities Fail Scrutiny" by *Hobbit*, Avian Research - January 1997
• File Sharing: Unknown Dangers on your network, by Kristopher Klaus
• Just what is SMB?, by Richard Sharpe
• Overview of Windows 95 & Networking Issues, The University of Central Oklahoma
• Win95 FAQ Part 7 of 14: Networking
• Microsofmt Windows 95 Security Tips For Users Connected to the Internet via Cable Modem or Other Direct Channels
• "NetMeeting Security Concerns and Deployment Issues," by Chris Shenton, NASA.
• "Cryptanalysis of Microsoft's Point-to-Point Tunneling Protocol (PPTP)" by B. Schneier and P. Mudge [Microsoft's response]
• Windows 95/98 Computer Security Information, CERT/CC
• The new Unix alters NT's orbit - NC World - April 1998
• Securing Windows NT Installation
• NT Security - Frequently Asked Questions
• Bill Wall's Windows NT links
• NT SECURITY
• Security White Papers and Web Links for Windows NT
• NTBugTraq email list
• The PC Hacking FAQ

Viruses and Anti-Virus (and Anti-Antivirus...)

• Online virus checking sites
  • Virustotal live screener
  • Norman's Sandbox live screener
  • Jotti's malware scan
  • Clamav Online Specimen Scanner (COSS)
• Behavior Blocking: The Next Step in Anti-Virus Protection, by Carey Nachenberg, SecurityFocus.com, March 19, 2002
• Antivirus Research and Detection Techniques (part 1), by Jay Munro, ExtremeTech.com, July 1, 2002
• Antivirus Research and Detection Techniques (part 2), by Jay Munro, ExtremeTech.com, July 10, 2002
• Is AntiVirus Technology Headed For Obsolescence? by Larry Seltzer, eWeek.com, June 26, 2003
• The Art of Computer Virus Researc h and Defense, by Peter Szor, Addison Wesley in collaboration with Symantec Press, ISBN 0321304543, February, 2005