Skip to content
Category

Microsoft Windows security technology

page 1
Microsoft Defender Antivirus
antivirus app, component of Windows Vista and later
BitLocker
BitLocker is a full volume encryption feature included with Microsoft Windows versions starting with Windows Vista. It is designed to protect data by providing encryption for entire volumes. By default, it uses the Advanced Encryption Standard (AES) algorithm in cipher block chaining (CBC) or "xor–encrypt–xor (XEX)-based tweaked codebook mode with ciphertext stealing" (XTS) mode with a 128-bit or 256-bit key. CBC is not used over the whole disk; it is applied to each individual sector.
Windows Firewall
firewall software for Windows
User Account Control
limits rights used by applications on Microsoft Windows
Trusted Computing
technology developed and promoted by the Trusted Computing Group
Security and Maintenance
component of Windows in charge of monitoring and displaying alerts about various security- and performance-related metrics
NTLM
In a Windows network, NT (New Technology) LAN Manager (NTLM) is a suite of Microsoft security protocols intended to provide authentication, integrity, and confidentiality to users. NTLM is the successor to the authentication protocol in Microsoft LAN Manager (LANMAN), an older Microsoft product. The NTLM protocol suite is implemented in a Security Support Provider, which combines the LAN Manager authentication protocol, NTLMv1, NTLMv2 and NTLM2 Session protocols in a single package. Whether these protocols are used or can be used on a system, which is governed by Group Policy settings, for whi
Security Identifier
ID number used for user accounts and groups in Microsoft Windows
Security Accounts Manager
windows database that stores users' passwords
Next-Generation Secure Computing Base
software architecture
Mimikatz
Mimikatz is both an exploit on Microsoft Windows that extracts passwords stored in memory and software that performs that exploit. It was created by French programmer Benjamin Delpy and is French slang for "cute cats".
Local Security Authority Subsystem Service
the centre of the Windows NT security subsystem
MS-CHAP
MS-CHAP is the Microsoft version of the Challenge-Handshake Authentication Protocol, (CHAP).
LAN Manager
discontinued Microsoft networking operating system
Mandatory Integrity Control
core security feature introduced in Windows Vista and implemented in subsequent desktop line of Windows operating systems
Syskey
thumbnail|Screenshot of the Syskey utility on the Windows 8.1 operating system requesting the user to enter a password
Microsoft Point-to-Point Encryption
encryption technology
access token
data that contains the security credentials for a login session and identifies the user, the user’s groups, the user’s privileges, or a particular application
Security Support Provider Interface
Windows application programming interface
Microsoft CryptoAPI
application programming interface
Microsoft SmartScreen
Microsoft Windows anti-malware system
Network Access Protection
computer security technology
security descriptor
term
User Interface Privilege Isolation
technology
Data Protection API
Windows API for cryptography
Kernel Patch Protection
security feature of Microsoft Windows
Code Access Security
_NSAKEY
_NSAKEY was a variable name discovered in Windows NT 4 SP5 in 1999 by Andrew D. Fernandes of Cryptonym Corporation. The variable contained a 1024-bit public key; public keys are used in public-key cryptography for encryption and digital signature verification (but not decryption or signing). Because of the name, however, it was speculated that the key would allow the United States National Security Agency (NSA) to subvert any Windows user's security. Microsoft denied the speculation and said that the key's name came from the fact that NSA was the technical review authority for U.S. cryptograph
Killbit
Killbit is a security feature in web browsers based on Microsoft's Trident engine (such as Internet Explorer) and other ActiveX containers that respect the killbit (such as Microsoft Office). A killbit instructs an ActiveX control container never to use a specific piece of ActiveX software, whether third-party or Microsoft, as identified by its class identifier (CLSID).
Internet Authentication Service
component of Windows Server that provides centralized user authentication, authorization and accounting
Cryptographic Service Provider
bootloader unlocking
process of disabling secure booting to allow installation of custom firmware on a device
Microsoft Baseline Security Analyzer
computer security evaluation tool
Active Directory Rights Management Services
Microsoft server software for information rights management