2.9 KiB
2.9 KiB
Workstations — AT Trebesch
Inventory built from on-machine audit runs. Last updated 2026-04-17.
Summary
| PC Name | User/Role | OS | Edition | Domain | BitLocker | Last Audit |
|---|---|---|---|---|---|---|
| DESKTOP-QNP3ON5 | Owner | Win 11 25H2 | Home | WORKGROUP | None (decrypted) | 2026-04-17 |
DESKTOP-QNP3ON5
Hardware
- Lenovo (model 91D00000US)
- Serial: MZ025MVK
- BIOS: M68KT23A
- CPU: AMD Ryzen 7 250 w/ Radeon 780M Graphics (8 cores / 16 threads)
- RAM: 15.3 GB
- Storage: 953 GB KIOXIA KBG6AZNV1T02 LA SSD (NVMe), 598 GB free, healthy
- Chassis: Desktop, no battery
OS / Activation
- Windows 11 Home 25H2 (build 26200), 64-bit
- Installed 2025-10-12
- License: Licensed (StatusCode 1), partial key 6F4JW
Network
- Ethernet: Realtek PCIe GbE — UP, 1 Gbps, 10.0.0.15
- Wi-Fi: Realtek RTL8852BE WiFi 6 — disconnected
- Bluetooth NIC enabled (unused — recommend disable)
- Saved Wi-Fi profiles: ComputerGuru, Scurda2
Local accounts (enabled)
| Name | Last Logon | PasswordRequired | Notes |
|---|---|---|---|
| Owner | 2026-04-15 | False | PASSWORD NOT REQUIRED — fix immediately |
| guru | 2025-10-18 | True | MSP backdoor, in Administrators |
| localadmin | (never logged) | True | Second MSP backdoor, in Administrators |
Local Administrators: Administrator (disabled), guru, localadmin, Owner
Security posture (highlights)
- BitLocker: Off, drive fully decrypted (Win Home limits BitLocker to "Device Encryption" only)
- Secure Boot: DISABLED (UEFI capable, TPM 2.0 ready — turn on)
- TPM: present + ready
- WinRE: enabled
- Firewall: enabled on all 3 profiles
- LSA Protection (RunAsPPL): enabled (good)
- WDigest cleartext: disabled (good)
- Cached logons: 10 (recommend lower to 4)
- NTLM LmCompatibilityLevel: blank (defaults to 3, recommend explicit 5)
- UAC: enabled (default settings)
- RDP: disabled
- USB storage: unrestricted
- AutoPlay: not disabled
Antivirus posture
- Bitdefender Endpoint Security Tools 8.26.4.628 — primary EDR, 4 services running
- Malwarebytes 5.5.4.252 — CONFLICT, also real-time. Pick one.
- Defender: Passive Mode (correct, deferring to Bitdefender), but Tamper Protection disabled
- Defender ASR rules: 1 configured, 0 in Block mode
Apps of note
- Office 365 Apps Pro Plus (Office 2024)
- Carbonite 6.6.0 (Dec 2025 build)
- Classic Shell 4.3.1 — abandoned project, replace with Open-Shell-Menu or remove
- ExplorerPatcher 26100.4946.69.6 — Win10-style shell mod
- Lenovo System Update 5.08.03.59
- AMD Software 26.3.1
- Canon MX490 series MP Drivers 1.02 (printer)
- Windows 11 Installation Assistant — leftover, can uninstall
Performance
- Memory at 85.1% used (2.3 GB free of 15.3 GB) — investigate top procs in audit JSON
- Uptime: 2.6 days (boot 2026-04-14)
- 263 processes running
Updates
- KB5083769, KB5082417, KB5088467 (4/14-4/15 cycle) installed
- 1 pending update
- 0 WU failures in last 30d