82 lines
2.9 KiB
Markdown
82 lines
2.9 KiB
Markdown
# Workstations — AT Trebesch
|
|
|
|
Inventory built from on-machine audit runs. Last updated 2026-04-17.
|
|
|
|
## Summary
|
|
|
|
| PC Name | User/Role | OS | Edition | Domain | BitLocker | Last Audit |
|
|
|---|---|---|---|---|---|---|
|
|
| DESKTOP-QNP3ON5 | Owner | Win 11 25H2 | **Home** | WORKGROUP | None (decrypted) | 2026-04-17 |
|
|
|
|
## DESKTOP-QNP3ON5
|
|
|
|
**Hardware**
|
|
- Lenovo (model 91D00000US)
|
|
- Serial: MZ025MVK
|
|
- BIOS: M68KT23A
|
|
- CPU: AMD Ryzen 7 250 w/ Radeon 780M Graphics (8 cores / 16 threads)
|
|
- RAM: 15.3 GB
|
|
- Storage: 953 GB KIOXIA KBG6AZNV1T02 LA SSD (NVMe), 598 GB free, healthy
|
|
- Chassis: Desktop, no battery
|
|
|
|
**OS / Activation**
|
|
- Windows 11 Home 25H2 (build 26200), 64-bit
|
|
- Installed 2025-10-12
|
|
- License: Licensed (StatusCode 1), partial key 6F4JW
|
|
|
|
**Network**
|
|
- Ethernet: Realtek PCIe GbE — UP, 1 Gbps, 10.0.0.15
|
|
- Wi-Fi: Realtek RTL8852BE WiFi 6 — disconnected
|
|
- Bluetooth NIC enabled (unused — recommend disable)
|
|
- Saved Wi-Fi profiles: ComputerGuru, Scurda2
|
|
|
|
**Local accounts (enabled)**
|
|
| Name | Last Logon | PasswordRequired | Notes |
|
|
|---|---|---|---|
|
|
| Owner | 2026-04-15 | **False** | **PASSWORD NOT REQUIRED — fix immediately** |
|
|
| guru | 2025-10-18 | True | MSP backdoor, in Administrators |
|
|
| localadmin | (never logged) | True | Second MSP backdoor, in Administrators |
|
|
|
|
**Local Administrators:** Administrator (disabled), guru, localadmin, Owner
|
|
|
|
**Security posture (highlights)**
|
|
- BitLocker: Off, drive fully decrypted (Win Home limits BitLocker to "Device Encryption" only)
|
|
- Secure Boot: **DISABLED** (UEFI capable, TPM 2.0 ready — turn on)
|
|
- TPM: present + ready
|
|
- WinRE: enabled
|
|
- Firewall: enabled on all 3 profiles
|
|
- LSA Protection (RunAsPPL): enabled (good)
|
|
- WDigest cleartext: disabled (good)
|
|
- Cached logons: 10 (recommend lower to 4)
|
|
- NTLM LmCompatibilityLevel: blank (defaults to 3, recommend explicit 5)
|
|
- UAC: enabled (default settings)
|
|
- RDP: disabled
|
|
- USB storage: unrestricted
|
|
- AutoPlay: not disabled
|
|
|
|
**Antivirus posture**
|
|
- Bitdefender Endpoint Security Tools 8.26.4.628 — primary EDR, 4 services running
|
|
- Malwarebytes 5.5.4.252 — **CONFLICT, also real-time. Pick one.**
|
|
- Defender: Passive Mode (correct, deferring to Bitdefender), but Tamper Protection disabled
|
|
- Defender ASR rules: 1 configured, 0 in Block mode
|
|
|
|
**Apps of note**
|
|
- Office 365 Apps Pro Plus (Office 2024)
|
|
- Carbonite 6.6.0 (Dec 2025 build)
|
|
- Classic Shell 4.3.1 — abandoned project, replace with Open-Shell-Menu or remove
|
|
- ExplorerPatcher 26100.4946.69.6 — Win10-style shell mod
|
|
- Lenovo System Update 5.08.03.59
|
|
- AMD Software 26.3.1
|
|
- Canon MX490 series MP Drivers 1.02 (printer)
|
|
- Windows 11 Installation Assistant — leftover, can uninstall
|
|
|
|
**Performance**
|
|
- Memory at 85.1% used (2.3 GB free of 15.3 GB) — investigate top procs in audit JSON
|
|
- Uptime: 2.6 days (boot 2026-04-14)
|
|
- 263 processes running
|
|
|
|
**Updates**
|
|
- KB5083769, KB5082417, KB5088467 (4/14-4/15 cycle) installed
|
|
- 1 pending update
|
|
- 0 WU failures in last 30d
|