What is C++

C++is a general-purpose programming language with a bias towards systems programming that
– is a better C,
– supports data abstraction,
– supports object-oriented programming, and
– supports generic programming.

Strong Password Policy

¢Combines three  of the  four following character types:

—Uppercase  characters  (twenty-six   letters  A-Z)

—Lowercase  characters  (twenty-six   letters  a-z)

—Numbers  (ten  numbers  0-9)

—Special   characters  (thirty-two  printable  characters,   such  as  !,   $,   and  *)

¢You can calculate  the  key space  with the  following formula: C^N (CN)

—C i s t he  number of possible  characters used,  and N is the  length of the  password

 

¢For example ,  a six-character password using only lower case  letters (twenty-six possibilities) i s calculated as 26^6 (266),  or about  308 million possibilities

¢

¢

¢If we are using all 94 printable character with six character password 946

¢    

 

Password Policy

¢Passwords should be strong.

— This  means  they  are  at  l east  eight  characters  and  include  multiple  character  types , such  as  upper  case,   lower  case,   numbers,  and  symbol s.

¢Passwords should be changed regularly .

—Users  should  be  forced  to  change  their  passwords  on  a  regular  basis  by setting  m ax i m um   password  ages,   or  password  expiration  times.

¢Passwords should not be reused.

— Password  histories  prevent  users  f rom   using  the  same  passwords  repeatedly.

¢Default passwords should be changed.

—If   a  system   comes  with  a  default  password,   that  default  password  should be  changed  before  the  system   is  brought  into  service.

¢Passwords should not be written down.

— If   the  password  absolutely  must  be  written  down,   store in  a  safe  (not just  a  safe  place).

¢Passwords should not be shared.  

—Only  one  person  should  know  the  password  to  any  single  account.   If   an administrator  resets  a  password,   the  password  should  be  set  to  expire  immediately.   This  requires  users  to  reset  the  password  the first  time  they  log  on.

¢Account lockout policies should be used.

—  If   a  user  enters  the  wrong  password  too  many  times,   an  account lockout  pol i cy  locks  the  account.   This  prevents  password  guessing  attempts

¢

 

Windows key shortcuts

Win : switch between the Start screen and the last-running Windows 8 app
Win + C : displays the Charms: the Settings, Devices, Share and Search options
Win + D : launches the desktop
Win + E : launches Explorer
Win + F : opens the File Search pane
Win + H : opens the Share pane
Win + I : opens Settings
Win + K : opens the Devices pane
Win + L : locks your PC
Win + M : minimises the current Explorer or Internet Explorer window (works in the full-screen IE, too)
Win + O : toggles device orientation lock on and off
Win + P : switch your display to a second display or projector
Win + Q : open the App Search pane
Win + R : opens the Run box
Win + U : open the Ease of Access Centre
Win + V : cycle through toasts (notifications)
Win + W : search your system settings (type POWER for links to all power-related options, say)
Win + X : displays a text menu of useful Windows tools and applets
Win + Z : displays the right-click context menu when in a full-screen app
Win + + : launch Magnifier and zoom in
Win + - : zoom out
Win + , : Aero peek at the desktop
Win + Enter : launch Narrator
Win + PgUp : move the current screen to the left-hand monitor
Win + PgDn : move the current screen to the right-hand monitor
Win + PrtSc : capture the current screen and save it to your Pictures folder
Win + Tab : switch between running apps

Computer Forensics Versus Other Related Disciplines

 Investigators often examine a computer disk not knowing whether it contains evidence—they must search storage media.
if they find data, they piece it together to produce evidence.
Various forensics software tools can be used for most cases.
In extreme cases, investigators can use electron microscopes and other sophisticated equipment to retrieve information from machines that have been damaged or purposefully reformatted.

Computer Forensics Versus Other Related Disciplines

 Investigators often examine a computer disk not knowing whether it contains evidence—they must search storage media.
if they find data, they piece it together to produce evidence.
Various forensics software tools can be used for most cases.
In extreme cases, investigators can use electron microscopes and other sophisticated equipment to retrieve information from machines that have been damaged or purposefully reformatted.

Computer Forensics Versus Other Related Disciplines

 Investigators often examine a computer disk not knowing whether it contains evidence—they must search storage media.
if they find data, they piece it together to produce evidence.
Various forensics software tools can be used for most cases.
In extreme cases, investigators can use electron microscopes and other sophisticated equipment to retrieve information from machines that have been damaged or purposefully reformatted.

Network forensics and investigating logs

<iframe src="http://www.slideshare.net/slideshow/embed_code/26123521" width="476" height="400" frameborder="0" marginwidth="0" marginheight="0" scrolling="no"></iframe>

Password Policy and Account Lockout Policies

<iframe src="http://www.slideshare.net/slideshow/embed_code/26122716" width="427" height="356" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" style="border:1px solid #CCC;border-width:1px 1px 0;margin-bottom:5px" allowfullscreen webkitallowfullscreen mozallowfullscreen> </iframe> <div style="margin-bottom:5px"> <strong> <a href="https://www.slideshare.net/anilinvns/password-policy" title="Password Policy and Account Lockout Policies" target="_blank">Password Policy and Account Lockout Policies</a> </strong> from <strong><a href="http://www.slideshare.net/anilinvns" target="_blank">anilinvns</a></strong> </div>

Boot Loader

GNU grand unified bootloader (GRUB)

•  A multiboot specification that allows the user to choose one of several OSs

NT loader (NTLDR)

• A bootloader for Microsoft’s Windows NT OS that usually runs from the hard drive

Linux loader (LILO)

• A bootloader for Linux that generally runs from a hard drive or floppy disc

Network interface controller (NIC)

• Uses a bootloader that supports booting from a network interface such as Etherboot or pre-boot execution environment (PXE)

Steganography

Technically in simple words “steganography means hiding one piece of data within another”
Modern steganography uses the opportunity of hiding information into digital multimedia files and also at the network packet level.

Command Prompt Tools

Ping==Checks connectivity with a device on a network and identifies response times.
Ipconfig== Displays TCP/IP configuration assigned to network interface cards
Tracert== Checks connectivity with a device and shows routers in the path.
Nslookup==Verifies that DNS can resolve a host name to an IP address. It can verify
that a record exists in DNS.
Netstat== Shows network statistics, including a list of inbound and outbound connections
for a system.
Nbtstat==Shows statistics for NetBIOS.
Arp== Shows MAC address to IP address mappings.
Net Use==Used to map drives to remote shares.

Configure SSH On Router and Switch

Router>enable
Router#configure terminal
Router(config)#hostname jodhpur
Enter configuration commands, one per line.  End with CNTL/Z.
jodhpur(config)#interface FastEthernet0/0
jodhpur(config-if)#no shutdown

%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

jodhpur(config-if)#ip address 192.168.1.1 255.255.255.0

jodhpur(config)#ip domain-name cdac.com
jodhpur(config)#username anil password 123

Router(config)#crypto key generate rsa

Router And Switch (L2,L3) Audit Check List

Disable Unneeded Services
Are unused interfaces disabled?	Unused interfaces on the router should be disabled. Router(config-if)# shutdown
Is DNS lookups for the router turned off ?	This client service is enabled by default and is not required on most routers. The following command is used to turn DNS lookup off. Router(config)#no ip domain-lookup
Is TCP small servers and UDP small servers service disabled on the router? {applicable before Cisco IOS 11.3}	These services are rarely used and hence can be disabled. This is disabled by default after Cisco IOS 11.3 Router(config)#no service tcp-small-servers Router(config)#no service udp-small-servers

Checklist for Auditing Layer 2 Devices

1.      Verify that administrators avoid using VLAN 1.

2.      Evaluate the use of trunk autonegotiation.

3.      Verify that Spanning-Tree Protocol attack mitigation is enabled (BPDU Guard, Root Guard).

4.      Evaluate the use of VLANs on the network.

5.      Disable all unused ports, and put them in an unused VLAN.

6.      Evaluate use of the VLAN Trunking Protocol (VTP) in the environment.

7.      Verify that thresholds exist that limit broadcast/multicast traffic on ports.

Installation Of Exchange Server 2010

System Requirements

• AD forest functional level is Windows Server 2003 (or higher)
• AD Schema Master is running Windows Server 2003 w/SP1 or later
• Full installation of Windows Server 2008 w/SP2 or later OR Windows Server 2008 R2 for the Exchange server itself
• Exchange server is joined to the domain (except for the Edge Transport server role)

Prerequisites

In this example we are going to install Exchange 2010 on a Windows Server 2008 R2 operating system. Before installing Exchange we need to install some Windows components. It's important that you don't miss anything here because the Exchange 2010 installer does not provide very good feedback if Server 2008 R2 is missing required components.

1. Install the 2007 Office System Converter: Microsoft Filter Pack
2. Add the appropriate Windows components/features
1. Open PowerShell via the icon on the task bar or Start >> All Programs >> Accessories >> Windows PowerShell >> Windows PowerShell. Be sure that PowerShell opened with an account that has rights to install Windows components/features.
2. Run the following command: Import-Module ServerManager
3. For a typical install with the Client Access, Hub Transport, and Mailbox roles run the following command: Add-WindowsFeature NET-Framework,RSAT-ADDS,Web-Server,Web-Basic-Auth,Web-Windows-Auth,Web-Metabase,Web-Net-Ext,Web-Lgcy-Mgmt-Console,WAS-Process-Model,RSAT-Web-Server,Web-ISAPI-Ext,Web-Digest-Auth,Web-Dyn-Compression,NET-HTTP-Activation,RPC-Over-HTTP-Proxy -Restart. For a full matrix of the required Windows components with regards to the Exchange server roles see: http://technet.microsoft.com/en-us/library/bb691354.aspx#WS08R2
3. If your Exchange server will have the Client Access Server role set the Net.Tcp Port Sharing Service to start automatically
1. Open PowerShell via the icon on the task bar or Start >> All Programs >> Accessories >> Windows PowerShell >> Windows PowerShell. Be sure that PowerShell opened with an account that has rights to modify service startup settings.
2. Run the following command: Set-Service NetTcpPortSharing -StartupType Automatic

Exchange 2010 Installation

1. Logon to the desktop of your soon to be Exchange server with a Domain Admin account.
2. Run setup from the Exchange 2010 media.
3. Click on "Step 3: Choose Exchange language option" and choose one of the options (Install only languages from the DVD will be fine in most cases).
4. Click on "Step 4: Install Microsoft Exchange."
5. Click Next at the Introduction page.
6. Accept the license terms and click Next.
7. Make a selection on the Error Reporting page and click Next.
8. Stick with the default "Typical Exchange Server Installation" and click Next.
9. Choose a name for your Exchange Organization and click Next.
10. Make a selection on the Client Settings page and click Next.
11. If you want your Exchange server to be available externally then choose a domain name such as mail.myorganization.com, click Next.
12. Make a selection on the Customer Experience Improvement Program page and click Next.
13. If all the prerequisites are there then you can click Install.
14. Grab a cup of coffee or take a walk while the installation process does its thing.
15. When the installation has finished go back to the Exchange installation page click on "Step 5: Get critical updates for Microsoft Exchange."
16. Install Microsoft Update (if necessary) so that Windows update will check for non-OS updates, and verify that there are no Exchange updates.