Detections
Analytics

Microsoft Windows AutoRuns Winlogon

info Nessus Plugin ID 70629

Language:

Synopsis

Report programs that startup associates with the winlogon process.

Description

Report the startup locations associated with the winlogon process.

These values could add features to the logon process, assist in authentication, or set screen savers.

See Also

http://www.nessus.org/u?f5e6d892

http://www.nessus.org/u?1b45540f

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc786387(v=ws.10)

http://technet.microsoft.com/en-us/library/bb742541.aspx

http://www.browsersentinel.com/help/startup.htm

http://bsa.isoftware.nl/frame9.htm

http://www.nessus.org/u?a9a73b84

http://www.nessus.org/u?1d4d3d5a

http://www.pctools.com/guides/registry/detail/210/

http://searchtasks.answersthatwork.com/tasklist.php?File=SaveDump

http://www.nessus.org/u?7800f331

http://www.nessus.org/u?54d31a62

http://www.nessus.org/u?bea6cd44

http://www.nessus.org/u?3ee10d2e

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc786702(v=ws.10)

Plugin Details

Severity: Info

ID: 70629

File Name: windows_autoruns_winlogon.nbin

Version: 1.280

Type: local

Agent: windows

Family: Windows

Published: 10/25/2013

Updated: 11/22/2024

Supported Sensors: Nessus Agent, Nessus

Vulnerability Information

Required KB Items: SMB/Registry/Enumerated, war/setup/ran