Windows Configuration
Windows Configuration
Interacting with OS
Task Manager
To get to Task Manager directly in any of the Windows versions that include it, you can press Ctrl+Shift+Esc.
Various tabs in task manager:
- Processes: shows which tasks are open on the machine.
- Details: shows status of apps, usernames etc
o Set priority by right clicking a task and selecting the level of priority – Low 4, below normal 6, normal 8,
above normal 10, high 13, realtime 24. Priority is changed only for that instance and reverts back to normal
when opening the app next time.
o Setting the priority to realtime may cause the processor to give precedence to this process over all others – like
security, spooling etc.
- Services:
- Performance: displays CPU usage, number of processes, number of threads, memory usage, physical memory etc.
- Startup
The Security log is used by the Security Reference Monitor inside the Executive kernel. It is responsible for
reporting object audit attempts. Examples of object audit attempts include file access, group membership,
and password changes Most of the useful security-related information will be in the application and system
logs. Using these logs, you can see errors and warnings that will alert you to potential security-related
problems.
Additional Tools
System Configuration Tool (msconfig.exe):
- Allows you to configure how windows 10/11 starts up, as well as launching additional tools.
- Main tabs are general, boot, services, startup (in windows 8/8.1/10/11 startup tab redirects
you to startup tab in device manager) and tools.
System Information tool (msinfo32.exe):
- Displays a fairly thorough list of settings on the machine.
- /computer: Allows you to specify a remote computer on which to run the utility
- /nfo: Creates a file and saves it with an .nfo extension
- /report: Creates a file and saves it with a .txt extension
Resource monitor (resmon.exe):
- is used to identify resource utilization of CPU, disk, network, and memory on Windows
- CPU tab displays processes with CPU utilization
- Memory tab displays memory usage of the processes running on the OS
- Disk tab helps identify a process that is overusing t he hard drive with a high amount of
read/write requests. This tab is extremely useful when you suspect that a process is slowing
down the system.
- Network tab displays all processes that are currently utilizing the network. It can also show
the destination address for each process, can also display processes running on TCP and UDP
port.
- Tool can also display firewall status for processes listening on the operating system.