Windows 10 Forensics Review

Front

What share is missing from the default administrative shares?

Back

IPC

Front

How to change the password for user 'peter'?

Back

Search 'Computer Management' > Local Users and Groups > right-click user 'peter' > select 'Set Password..' > enter the new password > Select 'OK'

Front

What are the steps to enable password complexity requirements?

Back

Press Windows key + R > enter 'secpol.msc' > select 'Account Policies' > select 'Password Policy' > select 'Password must complete complexity requirements' > select 'Enabled' and 'Apply'

Front

How to audit Credential Validation for success?

Back

Press Windows key + R > enter 'secpol.msc' > expand 'Advanced Audit Policy Configuration' > expand 'System Audit Policies' > double-click 'Account Logon' > double-click 'Audit Credential Validation' > check 'Configure the following audit events:' box > select 'Success' > select 'Apply' and 'OK'

Front

What to do to disable Simple TCP/IP Services?

Back

Search 'Control Panel' > select 'Programs' > select 'Programs and Features' > select 'Turn Windows features on or off' > deselect 'Simple TCPIP services' > select 'OK' > select 'Restart now'