<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title> ICRANIUM - serious about knowledge. Security, Forensics, Microsoft platform solutions. </title>
	<atom:link href="http://www.icranium.com/blog/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://www.icranium.com/blog</link>
	<description></description>
	<lastBuildDate>Tue, 20 Jul 2010 07:29:27 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>The Danger of Portable Media</title>
		<link>http://www.icranium.com/blog/?p=1280&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=the-danger-of-portable-media</link>
		<comments>http://www.icranium.com/blog/?p=1280#comments</comments>
		<pubDate>Wed, 03 Mar 2010 09:37:04 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Biometrics]]></category>
		<category><![CDATA[General Security]]></category>
		<category><![CDATA[Hardening]]></category>
		<category><![CDATA[Portable Media]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Biometric]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[Portable media]]></category>
		<category><![CDATA[USB]]></category>
		<category><![CDATA[Vulnerability]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1280</guid>
		<description><![CDATA[Many companies surprisingly aren&#8217;t worried about employees using a private USB stick or Hard Disk to get some data from the company network and do some work at home. However, portable storage devices pose a serious security threat. It can be lost or intentionally be used to leak sensitive data, and introduce serious trouble into... <a href="http://www.icranium.com/blog/?p=1280">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1280</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Services hardening within Windows Server 2008 and Windows 7</title>
		<link>http://www.icranium.com/blog/?p=1044&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=services-hardening-within-windows-server-2008-and-windows-7</link>
		<comments>http://www.icranium.com/blog/?p=1044#comments</comments>
		<pubDate>Sun, 28 Feb 2010 20:32:01 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Hardening]]></category>
		<category><![CDATA[Server]]></category>
		<category><![CDATA[Services]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Windows Client]]></category>
		<category><![CDATA[Hacking]]></category>
		<category><![CDATA[Vulnerabilities]]></category>
		<category><![CDATA[Windows Services]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1044</guid>
		<description><![CDATA[In the past Windows services are causing a large amount of attacks on the Windows platform. An attacker can rely on Windows services because the most common are almost always present on a Windows Machine. Like this creating a highly predictable situation and of course this all comes with the privilege level of services. This... <a href="http://www.icranium.com/blog/?p=1044">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1044</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Working with Windows User Account Control (UAC) and how to disable</title>
		<link>http://www.icranium.com/blog/?p=1039&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=working-with-windows-user-account-control-uac-and-how-to-disable</link>
		<comments>http://www.icranium.com/blog/?p=1039#comments</comments>
		<pubDate>Mon, 22 Feb 2010 22:14:30 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Server]]></category>
		<category><![CDATA[System Architecture]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Windows Client]]></category>
		<category><![CDATA[UAC]]></category>
		<category><![CDATA[User Account Control]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Windows Vista]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1039</guid>
		<description><![CDATA[Daily user don&#8217;t want to think about their rights on a machine to get their work done. It&#8217;s simple and gives us the biggest freedom to have the highest rights possible. So, Windows users are used to work with administrative privileges in both the enterprise organization and at home. This article discusses Windows User Account... <a href="http://www.icranium.com/blog/?p=1039">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1039</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows integrity level mechanism (WIL)</title>
		<link>http://www.icranium.com/blog/?p=1036&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=windows-integrity-level-mechanism-wil</link>
		<comments>http://www.icranium.com/blog/?p=1036#comments</comments>
		<pubDate>Mon, 22 Feb 2010 20:53:54 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[General Security]]></category>
		<category><![CDATA[Server]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Windows Client]]></category>
		<category><![CDATA[Integrity]]></category>
		<category><![CDATA[RID]]></category>
		<category><![CDATA[SID]]></category>
		<category><![CDATA[Trustworthy]]></category>
		<category><![CDATA[Windows Integrity Levels]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1036</guid>
		<description><![CDATA[Vista and later versions of Windows include a new feature called &#8220;Mandatory Integrity Controls&#8221; but also became known as &#8220;Windows Integrity Levels&#8221; (or WILs). Under WIL, every object that can have permissions can also have a label, stored in roughly the same place as it stores permissions, that identifies its &#8220;integrity level.&#8221; this article dicusses... <a href="http://www.icranium.com/blog/?p=1036">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1036</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>NTLM and Kerberos within Windows 7, Windows Server 2008</title>
		<link>http://www.icranium.com/blog/?p=1218&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=windows-7-windows-server-2008-and-ntlm</link>
		<comments>http://www.icranium.com/blog/?p=1218#comments</comments>
		<pubDate>Sun, 21 Feb 2010 22:09:15 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[General Security]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Server]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Windows Client]]></category>
		<category><![CDATA[Access Point]]></category>
		<category><![CDATA[Authentication]]></category>
		<category><![CDATA[Logon]]></category>
		<category><![CDATA[NTLM]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1218</guid>
		<description><![CDATA[The LAN Manager hash was one of the first password hashing algorithms in Windows operating systems. Newer operating systems today still support the use of LM hashes for backwards compatibility purposes. The good thing is; it is disabled by default for Windows Vista and Windows 7. This article discuss the support for LM, NTLM and... <a href="http://www.icranium.com/blog/?p=1218">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1218</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Windows 7 firewall facts</title>
		<link>http://www.icranium.com/blog/?p=1029&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=windows-7-firewall-facts</link>
		<comments>http://www.icranium.com/blog/?p=1029#comments</comments>
		<pubDate>Sat, 20 Feb 2010 21:56:50 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Crypto]]></category>
		<category><![CDATA[Firewall]]></category>
		<category><![CDATA[General Security]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Windows Client]]></category>
		<category><![CDATA[IPSec]]></category>
		<category><![CDATA[LAN]]></category>
		<category><![CDATA[Network]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1029</guid>
		<description><![CDATA[The serious Windows Firewall was introduced with Windows Vista, and at the time represented a major improvement over XP. The firewall in Windows 7 supports filtering for in &#8211; and outgoing traffic, as well as application-aware outbound filtering, which gives it full bi-directional control. This article dicusses the Firewall and its settings. The firewall is... <a href="http://www.icranium.com/blog/?p=1029">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1029</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using bitlocker encryption within Windows</title>
		<link>http://www.icranium.com/blog/?p=1047&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=using-bitlocker-encryption-within-windows</link>
		<comments>http://www.icranium.com/blog/?p=1047#comments</comments>
		<pubDate>Sat, 20 Feb 2010 21:15:53 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Crypto]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[Windows Client]]></category>
		<category><![CDATA[AES]]></category>
		<category><![CDATA[Bitlocker]]></category>
		<category><![CDATA[Disk encryption]]></category>
		<category><![CDATA[Encryption]]></category>
		<category><![CDATA[Flash memory]]></category>
		<category><![CDATA[TPM chip]]></category>
		<category><![CDATA[USB]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1047</guid>
		<description><![CDATA[Theft or loss of corporate intellectual property is an increasing problem and concern for organizations. Protection is particularly valuable with mobile computers and portable media like USB sticks, which are more vulnerable to theft or loss. Microsoft introduced Bitlocker in Windows. This article discusses Bitlocker, the possibilities, using USB keys and portable media with Bitlocker... <a href="http://www.icranium.com/blog/?p=1047">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1047</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Investigating and understanding processes on a Windows System</title>
		<link>http://www.icranium.com/blog/?p=1009&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=investigating-and-understanding-processes-on-a-windows-system</link>
		<comments>http://www.icranium.com/blog/?p=1009#comments</comments>
		<pubDate>Fri, 19 Feb 2010 22:57:22 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[OS Forensics]]></category>
		<category><![CDATA[System Architecture]]></category>
		<category><![CDATA[PID]]></category>
		<category><![CDATA[Processes]]></category>
		<category><![CDATA[Svchost]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=1009</guid>
		<description><![CDATA[Besides knowing what is happening on the network level it is interesting to know about the processes that run on a Windows system and the specific meaning of that process. From an administrator perspective it can be useful information in troubleshooting a machine. From a forensics perspective it is necessary that a system is being... <a href="http://www.icranium.com/blog/?p=1009">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=1009</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Determining DNS activity on a Windows System</title>
		<link>http://www.icranium.com/blog/?p=995&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=determining-network-connections-on-a-windows-system</link>
		<comments>http://www.icranium.com/blog/?p=995#comments</comments>
		<pubDate>Fri, 19 Feb 2010 13:52:55 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[General Security]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[Windows]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[Network]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=995</guid>
		<description><![CDATA[It is interesting and necessary to identify current and recent network activity on a Windows system.Â  In this article we&#8217;ll discuss how to get crucial DNS information and how to understand this information. Many malware do have network connectivity capabilities. the goals of this is to infect onther systems or to get commands from a... <a href="http://www.icranium.com/blog/?p=995">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=995</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Determining network activity on a Windows System</title>
		<link>http://www.icranium.com/blog/?p=903&#038;utm_source=rss&#038;utm_medium=rss&#038;utm_campaign=determining-network-connections-and-activity-on-a-windows-system</link>
		<comments>http://www.icranium.com/blog/?p=903#comments</comments>
		<pubDate>Thu, 18 Feb 2010 22:09:45 +0000</pubDate>
		<dc:creator>rpfaber</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[General Security]]></category>
		<category><![CDATA[Investigating User Activity]]></category>
		<category><![CDATA[Network Forensics]]></category>
		<category><![CDATA[Networking]]></category>
		<category><![CDATA[ARP Cache]]></category>
		<category><![CDATA[DNS]]></category>
		<category><![CDATA[Events]]></category>
		<category><![CDATA[LAN]]></category>
		<category><![CDATA[Network]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.icranium.com/blog/?p=903</guid>
		<description><![CDATA[In investigating a potentially infected or compromised system, it is essential to identify current and recent network activity. This information includes inspecting possible network connections and recent requests. In addition to this network activity analysis in common it might be interesting to know specific portnumber on which communication occurs and of course the processes on... <a href="http://www.icranium.com/blog/?p=903">Read More</a>]]></description>
		<wfw:commentRss>http://www.icranium.com/blog/?feed=rss2&#038;p=903</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

