In the latest version of the operating system, it's also a great way for users in the Windows Insider Program to check periodically and delete previous installations of the operating system, which are known to take up several gigabytes after a new build of Windows 10 is installed. Now simply modify the list by checking the new items and removing the ones you don't want.ĭisk Cleanup is a great tool that continues to come included with Windows 10, and it can help you to reclaim space on your hard drive. As you execute the previous command, you will notice that the Disk Cleanup tool will open with all the settings you have previously configured.Type the following command and press Enter: cleanmgr /sageset:11Remember to change 11 to the number you have chosen to store the settings.If you want to add or remove items you want Disk Cleanup to delete automatically, then use these steps: After running the command, the Disk Cleanup tool will open and run immediately, removing all the files you have configured on the tool. Type the following command and press Enter: C:\Windows\system32\cleanmgr.exe /sagerun:11Remember to change 11 to the number you have chosen.Use the Windows key + X keyboard shortcut to open the Power User menu and select Command Prompt (Admin).Thanks for your time happy hacking and good bye! This is a practical case for educational purposes only.
I don’t know if any APT in the wild used this tactic and trick, but, I hope this post spreads awareness to the blue teamers of this interesting technique especially when create software, and adds a weapon to the red teamers arsenal.
I think I will return to this issue in one of the future posts.Īlso, according to microsoft documentation, we can add new entries to: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches demoĬleanmgr.exe cleanmgr.exe /cleanup cleanmgr.exe /autoclean cleanmgr.exe /setup The difference is only in the values of the variables.
As you can see code is similar to COM hijacking post.
0 kommentar(er)
