Geek Fashion

This article presents two different detection types for insecure filesystem permissions on Windows endpoints: scanning for directories that are user-writable, and detecting processes that are started from user-writeable directories. Directory Scan With ListUserWriteableDirectories & SetACL My ListUserWriteableDirectories script is an implementation of the first detection type: it scans the filesystem listing any permissions not known to be safe.

In the past years I have attended many different conferences and user group meetings. Apart from the fact that every single one of them was great and definitely worth the while they all had another thing in common: getting there involved a significant amount of travel, in most cases to other countries or even continents. Whenever I read someone’s account of a local community meeting I was a tiny little bit envious that they had such things near their homes and I did not. High time to do something about it!