Info Windows shortcut (LNK) files hold a wealth of useful information for forensic investigators. There are a number of LNK […]
Procesador Memoria caché Memoria Acceso directo a memoria Discos duros Buses Conexiones E/S Dispositivos de entrada y salida Entrada Salida […]
Configuración inicial Descargar los últimos payloads desde GitHub https://github.com/hak5/bashbunny-payloads Conectar Bash Bunny en modo Arming Mode (“Switch Position 3: Arming […]
Win32_1394Controller: Represents the capabilities and management of a 1394 controller.
Win32_1394ControllerDevice: Relates the high-speed serial bus (IEEE 1394 Firewire) Controller and the CIM_LogicalDevice instance connected to it.
Win32_Account: Represents information about user accounts and group accounts known to the computer system running Windows.
Win32_AccountSID: Relates a security account instance with a security descriptor instance.
Win32_ACE: Represents an access control entry (ACE).
Win32_ActiveRoute: Relates the current IP4 route to the persisted IP route table.
Win32_AllocatedResource: Relates a logical device to a system resource.
Win32_AssociatedProcessorMemory: Relates a processor and its cache memory.
Win32_AutochkSetting: Represents the settings for the autocheck operation of a disk.
Win32_BaseBoard: Represents a baseboard (also known as a motherboard or system board).
Win32_BaseService: Represents executable objects that are installed in a registry database maintained by the Service Control Manager.
Win32_Battery: Represents a battery connected to the computer system.
Win32_BIOS: Represents the attributes of the computer system's basic input or output services (BIOS) that are installed on the computer.
Win32_BootConfiguration: Represents the boot configuration of a computer system running Windows.
Win32_Bus: Represents a physical bus as seen by a Windows operating system.
Win32_CacheMemory: Represents cache memory (internal and external) on a computer system.
Win32_CDROMDrive: Represents a CD-ROM drive on a computer system running Windows.
Win32_CIMLogicalDeviceCIMDataFile: Relates logical devices and data files, indicating the driver files used by the device.
Win32_ClassicCOMApplicationClasses: Relates a DCOM application and a COM component grouped under it.
Win32_ClassicCOMClass: Represents the properties of a COM component.
Win32_ClassicCOMClassSettings: Relates a COM class and the settings used to configure instances of the COM class.
Win32_ClientApplicationSetting: Relates an executable and a DCOM application that contains the DCOM configuration options for the executable file.
Win32_CollectionStatistics: Relates a managed system element collection and the class representing statistical information about the collection.
Win32_COMApplication: Represents a COM application.
Win32_COMApplicationClasses: Relates a COM component and the COM application where it resides.
Win32_COMApplicationSettings: Relates a DCOM application and its configuration settings.
Win32_COMClass: Represents the properties of a COM component.
Win32_ComClassAutoEmulator: Relates a COM class and another COM class that it automatically emulates.
Win32_ComClassEmulator: Relates two versions of a COM class.
Win32_ComponentCategory: Represents a component category.
Win32_ComputerShutdownEvent: Represents computer shutdown events.
Win32_ComputerSystem: Represents a computer system operating in a Windows environment.
Win32_ComputerSystemEvent: Represents events related to a computer system.
Win32_ComputerSystemProcessor: Relates a computer system and a processor running on that system.
Win32_ComputerSystemProduct: Represents a product.
Win32_ComputerSystemWindowsProductActivationSetting: Relates instances of Win32_ComputerSystem andWin32_WindowsProductActivation.
Win32_COMSetting: Represents the settings associated with a COM component or COM application.
Win32_ConnectionShare: Relates a shared resource on the computer and the connection made to the shared resource.
Win32_ControllerHasHub: Represents the hubs downstream from the universal serial bus (USB) controller.
Win32_CurrentProbe: Represents the properties of a current monitoring sensor (ammeter).
Win32_CurrentTime: Represents an instance in time as component seconds, minutes, day of the week, and so on.
Win32_DCOMApplication: Represents the properties of a DCOM application.
Win32_DCOMApplicationAccessAllowedSetting: Relates the Win32_DCOMApplication instance and the user security identifications (SID) that can access it.
Win32_DCOMApplicationLaunchAllowedSetting: Relates the Win32_DCOMApplication instance and the user SIDs that can launch it.
Win32_DCOMApplicationSetting: Represents the settings of a DCOM application.
Win32_DependentService: Relates two interdependent base services.
Win32_Desktop: Represents the common characteristics of a user's desktop.
Win32_DesktopMonitor: Represents the type of monitor or display device attached to the computer system.
Win32_DeviceBus: Relates a system bus and a logical device using the bus.
Win32_DeviceChangeEvent: Represents device change events resulting from the addition, removal, or modification of devices on the computer system.
Win32_DeviceMemoryAddress: Represents a device memory address on a Windows system.
Win32_DeviceSettings: Relates a logical device and a setting that can be applied to it.
Win32_DFSNode: Represents a root or junction node of a domain-based or stand-alone distributed file system (DFS).
Win32_DFSNodeTarget: Represents the relationship of a DFS node to one of its targets.
Win32_DFSTarget: Represents the target of a DFS node.
Win32_Directory: Represents a directory entry on a computer system running Windows.
Win32_DirectorySpecification: Represents the directory layout for the product.
Win32_DiskDrive: Represents a physical disk drive as seen by a computer running the Windows operating system.
Win32_DiskDriveToDiskPartition: Relates a disk drive and a partition existing on it.
Win32_DiskPartition: Represents the capabilities and management capacity of a partitioned area of a physical disk on a computer system running Windows.
Win32_DiskQuota: Tracks disk space usage for NTFS file system volumes.
Win32_DisplayControllerConfiguration: Represents the video adapter configuration information of a computer system running Windows. This class is obsolete. In place of this class, use the properties in the Win32_VideoController, Win32_DesktopMonitor, and CIM_VideoControllerResolution classes.
Win32_DMAChannel: Represents a direct memory access (DMA) channel on a computer system running Windows.
Win32_DriverForDevice: Relates a printer to a printer driver.
Win32_Environment: Represents an environment or system environment setting on a computer system running Windows.
Win32_Fan: Represents the properties of a fan device in the computer system.
Win32_FloppyController: Represents the capabilities and management capacity of a floppy disk drive controller.
Win32_FloppyDrive: Manages the capabilities of a floppy disk drive.
Win32_Group: Represents data about a group account.
Win32_GroupInDomain: Identifies the group accounts associated with a Windows NT domain.
Win32_GroupUser: Relates a group and an account that is a member of that group.
Win32_HeatPipe: Represents the properties of a heat pipe cooling device.
Win32_IDEController: Represents the capabilities of an Integrated Drive Electronics (IDE) controller device.
Win32_IDEControllerDevice: Association class that relates an IDE controller and the logical device.
Win32_ImplementedCategory: Relates a component category and the COM class using its interfaces.
Win32_InfraredDevice: Represents the capabilities and management of an infrared device.
Win32_IP4PersistedRouteTable: Represents persisted IP routes.
Win32_IP4RouteTable: Represents information that governs the routing of network data packets.
Win32_IP4RouteTableEvent: Represents IP route change events.
Win32_IRQResource: Represents an interrupt request line (IRQ) number on a Windows computer system.
Win32_Keyboard: Represents a keyboard installed on a computer system running Windows.
Win32_LoadOrderGroup: Represents a group of system services that define execution dependencies.
Win32_LoadOrderGroupServiceDependencies: Represents an association between a base service and a load order group that the service depends on to start running.
Win32_LoadOrderGroupServiceMembers: Relates a load order group and a base service.
Win32_LocalTime: Represents a point in time returned as Win32_LocalTime objects that result from a query. The Hour property is returned as the local time in a 24-hour clock.
Win32_LogicalDisk: Represents a data source that resolves to an actual local storage device on a computer system running Windows.
Win32_LogicalDiskRootDirectory: Relates a logical disk and its directory structure.
Win32_LogicalDiskToPartition: Relates a logical disk drive and the disk partition it resides on.
Win32_LogicalFileAccess: Relates the security settings of a file or directory and one member of its discretionary access control list (DACL).
Win32_LogicalFileAuditing: Relates the security settings of a file or directory one member of its system access control list (SACL).
Win32_LogicalFileGroup: Relates the security settings of a file or directory and its group.
Win32_LogicalFileOwner: Relates the security settings of a file or directory and its owner.
Win32_LogicalFileSecuritySetting: Represents security settings for a logical file.
Win32_LogicalProgramGroup: Represents a program group in a computer system running Windows.
Win32_LogicalProgramGroupDirectory: Relates logical program groups (groupings in the Start menu), and the file directories in which they are stored.
Win32_LogicalProgramGroupItem: Represents an element contained by a Win32_ProgramGroup instance, that is not itself anotherWin32_ProgramGroup instance.
Win32_LogicalProgramGroupItemDataFile: Relates the program group items of the Start menu, and the files in which they are stored.
Win32_LogicalShareAccess: Relates the security settings of a share and one member of its DACL.
Win32_LogicalShareAuditing: Relates the security settings of a share and one member of its SACL.
Win32_LogicalShareSecuritySetting: Represents security settings for a logical file.
Win32_LogonSession: Describes the logon session or sessions associated with a user logged on to Windows.
Win32_LogonSessionMappedDisk: Represents the mapped logical disks associated with the session.
Win32_LUID: Represents a locally unique identifier (LUID)
Win32_LUIDandAttributes: Represents a LUID and its attributes.
Win32_MappedLogicalDisk: Represents network storage devices that are mapped as logical disks on the computer system running Windows.
Win32_MemoryArray: Represents the properties of the computer system memory array and mapped addresses.
Win32_MemoryArrayLocation: Relates a logical memory array and the physical memory array upon which it exists.
Win32_MemoryDevice: Represents the properties of a computer system's memory device along with its associated mapped addresses.
Win32_MemoryDeviceArray: Relates a memory device and the memory array in which it resides.
Win32_MemoryDeviceLocation: Association class that relates a memory device and the physical memory on which it exists.
Win32_MethodParameterClass: Abstract, base class that implements method parameters derived from this class.
Win32_ModuleLoadTrace: Indicates that a process has loaded a new module.
Win32_ModuleTrace: Base event for module events.
Win32_MotherboardDevice: Represents a device that contains the central components of the computer system running Windows.
Win32_NamedJobObject: Represents a kernel object that is used to group processes for the sake of controlling the life and resources of the processes within the job object.
Win32_NamedJobObjectActgInfo: Represents the I/O accounting information for a job object.
Win32_NamedJobObjectLimit: Represents an association between a job object and the job object limit settings.
Win32_NamedJobObjectLimitSetting: Represents the limit settings for a job object.
Win32_NamedJobObjectProcess: Relates a job object and the process contained in the job object.
Win32_NamedJobObjectSecLimit: Relates a job object and the job object security limit settings.
Win32_NamedJobObjectSecLimitSetting: Represents the security limit settings for a job object.
Win32_NamedJobObjectStatistics: Represents an association between a job object and the job object I/O accounting information class.
Win32_NetworkAdapter: Represents a network adapter on a computer system running Windows.
Win32_NetworkAdapterConfiguration: Represents the attributes and behaviors of a network adapter. The class is not guaranteed to be supported after the ratification of the Distributed Management Task Force (DMTF) CIM network specification.
Win32_NetworkAdapterSetting: Relates a network adapter and its configuration settings.
Win32_NetworkClient: Represents a network client on a computer system running Windows.
Win32_NetworkConnection: Represents an active network connection in a Windows environment.
Win32_NetworkLoginProfile: Represents the network login information of a specific user on a computer system running Windows.
Win32_NetworkProtocol: Represents a protocol and its network characteristics on a computer system running Windows.
Win32_NTDomain: Represents a Windows NT domain.
Win32_NTEventlogFile: Represents data stored in a Windows Event log file.
Win32_NTLogEvent: Represents Windows events.
Win32_NTLogEventComputer: Relates instances of Win32_NTLogEvent and Win32_ComputerSystem.
Win32_NTLogEventLog: Relates instances of Win32_NTLogEvent and Win32_NTEventlogFile classes.
Win32_NTLogEventUser: Relates instances of Win32_NTLogEvent and Win32_UserAccount.
Win32_OnBoardDevice: Represents common adapter devices built into the motherboard (system board).
Win32_OperatingSystem: Represents an operating system installed on a computer system running Windows.
Win32_OperatingSystemAutochkSetting: Represents the association between a CIM_ManagedSystemElement instance and the settings defined for it.
Win32_OperatingSystemQFE: Relates an operating system and product updates applied as represented inWin32_QuickFixEngineering.
Win32_OSRecoveryConfiguration: Represents the types of information that will be gathered from memory when the operating system fails.
Win32_PageFile: Represents the file used for handling virtual memory file swapping on a Windows system.
Win32_PageFileElementSetting: Relates the initial settings of a page file and the state of those settings during normal use.
Win32_PageFileSetting: Represents the settings of a page file.
Win32_PageFileUsage: Represents the file used for handling virtual memory file swapping on a computer system running Windows.
Win32_ParallelPort: Represents the properties of a parallel port on a computer system running Windows.
Win32_PCMCIAController: Manages the capabilities of a Personal Computer Memory Card Interface Adapter (PCMCIA) controller device.
Win32_Perf: The base class for the performance counter classes Win32_PerfRawData and Win32_PerfFormattedData.
Win32_PerfFormattedData: an abstract base class for the pre-installed, calculated data classes.
Win32_PerfRawData: The abstract base class for all concrete raw performance counter classes.
Win32_PhysicalMedia: Represents any type of documentation or storage medium.
Win32_PhysicalMemory: Represents a physical memory device located on a computer as available to the operating system.
Win32_PhysicalMemoryArray: Represents details about the computer system's physical memory.
Win32_PhysicalMemoryLocation: Relates an array of physical memory and its physical memory.
Win32_PingStatus: Represents the values returned by the standard ping command.
Win32_PNPAllocatedResource: Represents an association between logical devices and system resources.
Win32_PNPDevice: Relates a device (known to Configuration Manager as a PNPEntity), and the function it performs.
Win32_PNPEntity: Represents the properties of a Plug and Play device.
Win32_PointingDevice: Represents an input device used to point to and select regions on the display of a computer system running Windows.
Win32_PortableBattery: Represents the properties of a portable battery, such as one used for a notebook computer.
Win32_PortConnector: Represents physical connection ports, such as DB-25 pin male, Centronics, and PS/2.
Win32_PortResource: Represents an I/O port on a computer system running Windows.
Win32_POTSModem: Represents the services and characteristics of a Plain Old Telephone Service (POTS) modem on a computer system running Windows.
Win32_POTSModemToSerialPort: Relates a modem and the serial port the modem uses.
Win32_PowerManagementEvent: Represents power management events resulting from power state changes.
Win32_Printer: Represents a device connected to a computer system running Windows that is capable of reproducing a visual image on a medium.
Win32_PrinterConfiguration: Defines the configuration for a printer device.
Win32_PrinterController: Relates a printer and the local device to which the printer is connected.
Win32_PrinterDriver: Represents the drivers for a Win32_Printer instance.
Win32_PrinterDriverDll: Relates a local printer and its driver file (not the driver itself).
Win32_PrinterSetting: Relates a printer and its configuration settings.
Win32_PrinterShare: Relates a local printer and the share that represents it as it is viewed over a network.
Win32_PrintJob: Represents a print job generated by a Windows-based application.
Win32_PrivilegesStatus: Represents information about the privileges required to complete an operation.
Win32_Process: Represents a sequence of events on a computer system running Windows.
Win32_Processor: Represents a device capable of interpreting a sequence of machine instructions on a computer system running Windows.
Win32_ProcessStartTrace: Indicates that a new process has started.
Win32_ProcessStartup: Represents the startup configuration of a computer system running Windows.
Win32_ProcessStopTrace: Indicates that a process has terminated.
Win32_ProcessTrace: Base event for process events.
Win32_ProgramGroupContents: Relates a program group order and an individual program group or item contained in it.
Win32_ProgramGroupOrItem: Represents a logical grouping of programs on the user's Start|Programs menu.
Win32_ProtocolBinding: Relates a system-level driver, network protocol, and network adapter.
Win32_Proxy: Contains properties and methods to query and configure an Internet connection related to WPA.
Win32_QuickFixEngineering: Represents system-wide Quick Fix Engineering (QFE) or updates that have been applied to the current operating system.
Win32_QuotaSetting: Contains setting information for disk quotas on a volume.
Win32_Refrigeration: Represents the properties of a refrigeration device.
Win32_Registry: Represents the system registry on a computer system running Windows.
Win32_ScheduledJob: Represents a job scheduled using the Windows schedule service.
Win32_SCSIController: Represents a small computer system interface (SCSI) controller on a computer system running Windows.
Win32_SCSIControllerDevice: Relates a SCSI controller and the logical device (disk drive) connected to it.
Win32_SecurityDescriptor: Represents a structural representation of a SECURITY_DESCRIPTOR.
Win32_SecuritySetting: Represents security settings for a managed element.
Win32_SecuritySettingAccess: Represents the rights granted and denied to a trustee for a given object.
Win32_SecuritySettingAuditing: Represents the auditing for a given trustee on a given object.
Win32_SecuritySettingGroup: Relates the security of an object and its group.
Win32_SecuritySettingOfLogicalFile: Represents security settings of a file or directory object.
Win32_SecuritySettingOfLogicalShare: Represents security settings of a shared object.
Win32_SecuritySettingOfObject: Relates an object to its security settings.
Win32_SecuritySettingOwner: Relates the security settings of an object and its owner.
Win32_SerialPort: Represents a serial port on a computer system running Windows.
Win32_SerialPortConfiguration: Represents the settings for data transmission on a Windows serial port.
Win32_SerialPortSetting: Relates a serial port and its configuration settings.
Win32_ServerConnection: Represents the connections made from a remote computer to a shared resource on the local computer.
Win32_ServerSession: Represents the sessions that are established with the local computer by users on a remote computer.
Win32_Service: Represents a service on a computer system running Windows.
Win32_SessionConnection: Represents an association between a session established with the local server by a user on a remote machine, and the connections that depend on the session.
Win32_SessionProcess: Represents an association between a logon session and the processes associated with that session.
Win32_ShadowBy: Represents the association between a shadow copy and the provider that creates the shadow copy.
Win32_ShadowContext: Specifies how a shadow copy is to be created, queried, or deleted.
Win32_ShadowCopy: Represents a duplicate copy of the original volume at a previous time.
Win32_ShadowDiffVolumeSupport: Represents an association between a shadow copy provider and a storage volume.
Win32_ShadowFor: Represents an association between a shadow copy and the volume for which the shadow copy is created.
Win32_ShadowOn: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowProvider: Represents a component that creates and represents volume shadow copies.
Win32_ShadowStorage: Represents an association between a shadow copy and where the differential data is written.
Win32_ShadowVolumeSupport: Represents an association between a shadow copy provider with a supported volume.
Win32_Share: Represents a shared resource on a computer system running Windows.
Win32_ShareToDirectory: Relates a shared resource on the computer system and the directory to which it is mapped.
Win32_ShortcutFile: Represents files that are shortcuts to other files, directories, and commands.
Win32_SID: Represents an arbitrary SID.
Win32_SIDandAttributes: Represents a security identifier (SID) and its attributes.
Win32_SMBIOSMemory: Represents the capabilities and management of memory-related logical devices.
Win32_SoundDevice: Represents the properties of a sound device on a computer system running Windows.
Win32_StartupCommand: Represents a command that runs automatically when a user logs onto the computer system.
Win32_SubDirectory: Relates a directory (folder) and one of its subdirectories (subfolders).
Win32_SystemAccount: Represents a system account.
Win32_SystemBIOS: Relates a computer system (including data such as startup properties, time zones, boot configurations, or administrative passwords) and a system BIOS (services, languages, and system management properties).
Win32_SystemBootConfiguration: Relates a computer system and its boot configuration.
Win32_SystemConfigurationChangeEvent: Indicates that the device list on the system has been refreshed (a device has been added or removed, or the configuration changed).
Win32_SystemDesktop: Relates a computer system and its desktop configuration.
Win32_SystemDevices: Relates a computer system and a logical device installed on that system.
Win32_SystemDriver: Represents the system driver for a base service.
Win32_SystemDriverPNPEntity: Relates a Plug and Play device on the Windows computer system and the driver that supports the Plug and Play device.
Win32_SystemEnclosure: Represents the properties associated with a physical system enclosure.
Win32_SystemLoadOrderGroups: Relates a computer system and a load order group.
Win32_SystemMemoryResource: Represents a system memory resource on a Windows system.
Win32_SystemNetworkConnections: Relates a network connection and the computer system on which it resides.
Win32_SystemOperatingSystem: Relates a computer system and its operating system.
Win32_SystemPartitions: Relates a computer system and a disk partition on that system.
Win32_SystemProcesses: Relates a computer system and a process running on that system.
Win32_SystemProgramGroups: Relates a computer system and a logical program group.
Win32_SystemResources: Relates a system resource and the computer system it resides on.
Win32_SystemServices: Relates a computer system and a service program that exists on the system.
Win32_SystemSetting: Relates a computer system and a general setting on that system.
Win32_SystemSlot: Represents physical connection points including ports, motherboard slots and peripherals, and proprietary connections points.
Win32_SystemSystemDriver: Relates a computer system and a system driver running on that computer system.
Win32_SystemTimeZone: Relates a computer system and a time zone.
Win32_SystemTrace: Base class for all system trace events, including module, process, and thread traces.
Win32_SystemUsers: Relates a computer system and a user account on that system.
Win32_TapeDrive: Represents a tape drive on a computer system running Windows.
Win32_TCPIPPrinterPort: Represents a TCP/IP service access point.
Win32_TemperatureProbe: Represents the properties of a temperature sensor (electronic thermometer).
Win32_Thread: Represents a thread of execution.
Win32_ThreadStartTrace: Indicates a new thread has started.
Win32_ThreadStopTrace: Indicates that a thread has stopped.
Win32_ThreadTrace: Base event class for thread events.
Win32_TimeZone: Represents the time zone information for a computer system running Windows.
Win32_TokenGroups: Represents information about the group SIDs in an access token.
Win32_TokenPrivileges: Represents information about a set of privileges for an access token.
Win32_Trustee: Represents a trustee.
Win32_USBController: Manages the capabilities of a universal serial bus (USB) controller.
Win32_USBControllerDevice: Relates a USB controller and the CIM_LogicalDevice instances connected to it.
Win32_USBHub: Represents the management characteristics of a USB hub.
Win32_UserAccount: Represents information about a user account on a computer system running Windows.
Win32_UserDesktop: Relates a user account and the desktop settings that are specific to it.
Win32_UserInDomain: Relates a user account and a Windows NT domain.
Win32_UTCTime: Represents a point in time that is returned as Win32_UTCTime objects that result from a query. The Hour property is returned as the coordinated universal time (UTC) time in a 24–hour clock.
Win32_VideoController: Represents the capabilities and management capacity of the video controller on a computer system running Windows.
Win32_VideoSettings: Relates a video controller and video settings that can be applied to it.
Win32_VoltageProbe: Represents the properties of a voltage sensor (electronic voltmeter).
Win32_Volume: Represents an area of storage on a hard disk.
Win32_Volume: Represents an area of storage on a hard disk.
Win32_VolumeChangeEvent: Represents a network-mapped drive event resulting from the addition of a network drive letter or mounted drive on the computer system.
Win32_VolumeQuota: Relates a volume to the per volume quota settings.
Win32_VolumeQuotaSetting: Relates disk quota settings with a specific disk volume.
Win32_VolumeUserQuota: Relates per user quotas to quota-enabled volumes.
Win32_VolumeUserQuota: Represents a volume to the per volume quota settings.
Win32_WindowsProductActivation: Contains properties and methods related to WPA.
Win32_WMIElementSetting: Association between a service running in the Windows system, and the WMI settings it can use.
Win32_WMISetting: Contains the operational parameters for the WMI service.
Presence This section focuses on information gathering about the victim host and the network that it’s attached to. System
#Shows all current environmental variables
#Shows all current environmental variables (macOS)
#Information about disk
#Retrieving Process Information
Get-Process | Select-Object Name,Path,Company,CPU,Product,TotalProcessorTime,StartTime
#Lists running threads for a specified process
(Get-Process chrome | Select-Object Threads).Threads
Get-Process | select -expand Threads
#Last Boot Uptime
Get-CimInstance -ClassName win32_operatingsystem | select csname, lastbootuptime
#Lists the current drivers on the system
#Events and event logs on the local and remote
Get-EventLog -LogName System -EntryType Error, Warning
Get-EventLog -LogName System -EntryType Error, Warning -ComputerName $computer
Delete information stored on hard disk drives (HDDs) in PC laptops, desktops or servers. More information https://dban.org/
Update account password: It is highly recommended that you update the default password for the Administrator account. To do this, […]
Each time that you run an application in your system, a Prefetch file which contains information about the files loaded […]
The Import-Csv cmdlet provides a way for you to read in data from a comma-separated values file (CSV) and then […]
Índice Instalación de sistemas operativos Proceso para realizar una instalación Planificación de la instalación Preparar el ordenador para la instalación […]
Índice Introducción a los sistemas informáticos Introducción a los sistemas operativos Instalación de sistemas operativos Configuración de máquinas virtuales Virtualización […]
Busca estas rutas:
2009-05-12 23:31:29 /FastHTTPAuthScanner200test/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:29 /admin/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:29 /wwwstats/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:30 /cache-stats/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:33 /stats/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:33 /web-console/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:33 /jmx-console/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:37 /manager/html - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:40 /webcacheadmin/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:44 /backup/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:44 /~root/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:44 /phpmyadmin/ - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:48 /etc/passwd - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:48 /boot.ini - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:51 /etc/passwd - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:51 /boot.ini - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:51 /portal/page/portal/TOPLEVELSITE/Welcome - 404 Mozilla/5.0+(FHScan+Core+1.1) -
2009-05-12 23:31:53 /security/security.php - 404 Mozilla/5.0+(FHScan+Core+1.1) -
Petición del fichero de arraque:
SELECT [cs-uri-stem], [cs-uri-query]
where [cs-uri-stem] like '%?%'
ORDER BY 1 desc