---
# System prepended metadata

title: Maîtrise de poste - Day 1

---

# Maîtrise de poste - Day 1
## Host OS

a l'aide de la commande msinfo32

### nom de la machine
MSI

### OS et version
Fabricant du système d’exploitation	Microsoft Corporation

Nom du système d’exploitation:	Microsoft Windows 10 Famille

### architecture processeur (32-bit, 64-bit, ARM, etc)

Type	PC à base de x64


### modèle du processeur
Processeur	Intel(R) Core(TM) i7-9750H CPU @ 2.60GHz, 2592 MHz, 6 cœur(s), 12 processeur(s) logique(s)

### ram

```
Manufacturer Banklabel Configuredclockspeed   Capacity
------------ --------- --------------------   --------
Samsung      BANK 0                    2667 8589934592
Samsung      BANK 2                    2667 8589934592
```
## Devices

### la marque et le modèle de votre processeur
```
PS C:\Users\killi> Get-WmiObject Win32_Processor

Caption           : Intel64 Family 6 Model 158 Stepping 10
DeviceID          : CPU0
Manufacturer      : GenuineIntel
MaxClockSpeed     : 2592
Name              : Intel(R) Core(TM) i7-9750H CPU @ 2.60GHz
SocketDesignation : U3E1
```
Mon ordinateur possède 12 processeurs et 6 cœurs.

Définition de i7-9750H:
Le nom de mon processeur (Intel(R) Core(TM) i7-8565U) est composé de sa marque, Intel(R) Core(TM), le i7 et la pour indiqué un "type" de processeur. Les 4chiffres suivant 8565 sont les numéro de modèle du produit et le U signifie que c'est un ultra powered.

#####  voici le modèle de mon trackpad:
```
OK         Mouse           Souris HID                                                                       HID\VID_...
```
##### le modèle de mes hauts parleurs

```
OK         AudioEndpoint   Speakers (Realtek(R) Audio)                                                      SWD\MMDE...
```
##### et le disque dur de mon pc
```
PS C:\Users\killi> Get-PhysicalDisk

Number FriendlyName         SerialNumber         MediaType CanPool OperationalStatus HealthStatus Usage            Size
------ ------------         ------------         --------- ------- ----------------- ------------ -----            ----
0      KBG30ZMV512G TOSHIBA 0008_0D04_0096_197D. SSD       False   OK                Healthy      Auto-Select 476.94 GB
```
##### les détails de mon disque dur :
```
   DiskPath : \\?\scsi#disk&ven_nvme&prod_kbg30zmv512g_tos#5&26dedec4&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

PartitionNumber  DriveLetter Offset                                                                                                                    Size Type
---------------  ----------- ------                                                                                                                    ---- ----
1                            1048576                                                                                                                 300 MB System
2                            315621376                                                                                                               128 MB Reserved
3                C           449839104                                                                                                            457.72 GB Basic
4                            491919507456                                                                                                            900 MB Recovery
5                            492863225856                                                                                                          17.92 GB Recovery


   DiskPath : \\?\usbstor#disk&ven_wd&prod_elements_25a1&rev_1018#575833314142384a43534e43&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

PartitionNumber  DriveLetter Offset                                                                                                                    Size Type
---------------  ----------- ------                                                                                                                    ---- ----
1                E           1048576                                                                                                                1.82 TB Basic
```
les fichiers de chaque partition:
```
  DiskPath : \\?\scsi#disk&ven_nvme&prod_kbg30zmv512g_tos#5&26dedec4&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}
   
  DiskPath : \\?\usbstor#disk&ven_wd&prod_elements_25a1&rev_1018#575833314142384a43534e43&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

```
System : Cette partition contient les fichier de boot de l'ordinateur.

Reserved : Cette partition contient les fichier essentiel à l'ordinateur.

Basic : Cette partition contient l'OS de l'ordinateur.

Recovery : Cette partition contient les fichier et dossier de récupération en cas de problème.

```
PS C:\Users\killi> Get-NetAdapter | fl Name, InterfaceIndex


Name           : Wi-Fi
InterfaceIndex : 24

Name           : VirtualBox Host-Only Network #3
InterfaceIndex : 20

Name           : VMware Network Adapter VMnet8
InterfaceIndex : 19

Name           : VMware Network Adapter VMnet1
InterfaceIndex : 18

Name           : VirtualBox Host-Only Network
InterfaceIndex : 17

Name           : Ethernet 2
InterfaceIndex : 12

Name           : VirtualBox Host-Only Network #2
InterfaceIndex : 11

Name           : Npcap Loopback Adapter
InterfaceIndex : 8
```
expliquer la fonction de chacune d'entre elles

L'interface Wi-Fi me permet d'avoir accès au Wi-Fi.

L'interface Ethernet 2 me permet une connection a l'aide d'un cable pour être directement connecté a la connection.


Les interfaces : VirtualBox Host-Only, sont utilisé pour le réseaux de nos vm virtualbox.

Les interfaces : VMware Network Adapter VMnet1  sont utilisé pour le réseaux de nos vm VMware.
```
PS C:\Users\killi> netstat -ano

Connexions actives

  Proto  Adresse locale         Adresse distante       État
  TCP    0.0.0.0:80             0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING       1464
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:902            0.0.0.0:0              LISTENING       4936
  TCP    0.0.0.0:912            0.0.0.0:0              LISTENING       4936
  TCP    0.0.0.0:1337           0.0.0.0:0              LISTENING       4620
  TCP    0.0.0.0:2861           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:2871           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:2882           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:2883           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:5040           0.0.0.0:0              LISTENING       5928
  TCP    0.0.0.0:5357           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:5426           0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:49664          0.0.0.0:0              LISTENING       648
  TCP    0.0.0.0:49665          0.0.0.0:0              LISTENING       588
  TCP    0.0.0.0:49666          0.0.0.0:0              LISTENING       1424
  TCP    0.0.0.0:49667          0.0.0.0:0              LISTENING       2508
  TCP    0.0.0.0:49668          0.0.0.0:0              LISTENING       2908
  TCP    0.0.0.0:49669          0.0.0.0:0              LISTENING       3812
  TCP    0.0.0.0:49824          0.0.0.0:0              LISTENING       984
  TCP    0.0.0.0:54235          0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:54236          0.0.0.0:0              LISTENING       4
  TCP    0.0.0.0:57621          0.0.0.0:0              LISTENING       27776
  TCP    0.0.0.0:63592          0.0.0.0:0              LISTENING       27776
  TCP    10.2.1.1:139           0.0.0.0:0              LISTENING       4
  TCP    10.4.1.1:139           0.0.0.0:0              LISTENING       4
  TCP    127.0.0.1:1236         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:1238         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:1414         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:1420         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:1428         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:2861         127.0.0.1:4201         ESTABLISHED     4
  TCP    127.0.0.1:2861         127.0.0.1:4447         ESTABLISHED     4
  TCP    127.0.0.1:2861         127.0.0.1:4506         ESTABLISHED     4
  TCP    127.0.0.1:2882         127.0.0.1:4270         ESTABLISHED     4
  TCP    127.0.0.1:2882         127.0.0.1:4507         ESTABLISHED     4
  TCP    127.0.0.1:2882         127.0.0.1:4521         ESTABLISHED     4
  TCP    127.0.0.1:2883         127.0.0.1:4269         ESTABLISHED     4
  TCP    127.0.0.1:2883         127.0.0.1:4444         ESTABLISHED     4
  TCP    127.0.0.1:2883         127.0.0.1:4516         ESTABLISHED     4
  TCP    127.0.0.1:3103         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:3531         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:3532         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:3533         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:3544         127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:4201         127.0.0.1:2861         ESTABLISHED     3120
  TCP    127.0.0.1:4269         127.0.0.1:2883         ESTABLISHED     15792
  TCP    127.0.0.1:4270         127.0.0.1:2882         ESTABLISHED     15792
  TCP    127.0.0.1:4444         127.0.0.1:2883         ESTABLISHED     15792
  TCP    127.0.0.1:4447         127.0.0.1:2861         ESTABLISHED     3120
  TCP    127.0.0.1:4506         127.0.0.1:2861         ESTABLISHED     27860
  TCP    127.0.0.1:4507         127.0.0.1:2882         ESTABLISHED     15792
  TCP    127.0.0.1:4516         127.0.0.1:2883         ESTABLISHED     3120
  TCP    127.0.0.1:4521         127.0.0.1:2882         ESTABLISHED     27860
  TCP    127.0.0.1:4528         127.0.0.1:10179        SYN_SENT        17324
  TCP    127.0.0.1:5565         0.0.0.0:0              LISTENING       3120
  TCP    127.0.0.1:5685         0.0.0.0:0              LISTENING       27860
  TCP    127.0.0.1:6463         0.0.0.0:0              LISTENING       17552
  TCP    127.0.0.1:6676         0.0.0.0:0              LISTENING       3120
  TCP    127.0.0.1:6796         0.0.0.0:0              LISTENING       27860
  TCP    127.0.0.1:7787         0.0.0.0:0              LISTENING       3120
  TCP    127.0.0.1:7907         0.0.0.0:0              LISTENING       27860
  TCP    127.0.0.1:10009        0.0.0.0:0              LISTENING       3120
  TCP    127.0.0.1:10009        127.0.0.1:4525         TIME_WAIT       0
  TCP    127.0.0.1:10129        0.0.0.0:0              LISTENING       27860
  TCP    127.0.0.1:15292        0.0.0.0:0              LISTENING       38668
  TCP    127.0.0.1:15393        0.0.0.0:0              LISTENING       38668
  TCP    127.0.0.1:16494        0.0.0.0:0              LISTENING       38668
  TCP    127.0.0.1:45623        0.0.0.0:0              LISTENING       37712
  TCP    127.0.0.1:49675        0.0.0.0:0              LISTENING       4504
  TCP    127.0.0.1:49675        127.0.0.1:1236         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:1238         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:1414         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:1420         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:1428         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:3103         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:3531         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:3532         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:3533         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:3544         ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:63560        ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:63595        ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:63980        ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:63993        ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:64000        ESTABLISHED     4504
  TCP    127.0.0.1:49675        127.0.0.1:65352        ESTABLISHED     4504
  TCP    127.0.0.1:52887        0.0.0.0:0              LISTENING       37712
  TCP    127.0.0.1:63439        127.0.0.1:65001        ESTABLISHED     4580
  TCP    127.0.0.1:63509        0.0.0.0:0              LISTENING       37500
  TCP    127.0.0.1:63560        127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:63595        127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:63615        0.0.0.0:0              LISTENING       37712
  TCP    127.0.0.1:63615        127.0.0.1:63797        ESTABLISHED     37712
  TCP    127.0.0.1:63766        0.0.0.0:0              LISTENING       37712
  TCP    127.0.0.1:63797        127.0.0.1:63615        ESTABLISHED     26632
  TCP    127.0.0.1:63980        127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:63993        127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:64000        127.0.0.1:49675        ESTABLISHED     24692
  TCP    127.0.0.1:65001        0.0.0.0:0              LISTENING       4580
  TCP    127.0.0.1:65001        127.0.0.1:63439        ESTABLISHED     4580
  TCP    127.0.0.1:65352        127.0.0.1:49675        ESTABLISHED     24692
  TCP    192.168.1.48:139       0.0.0.0:0              LISTENING       4
  TCP    192.168.1.48:3347      162.159.135.234:443    ESTABLISHED     39300
  TCP    192.168.1.48:3606      35.186.224.47:443      ESTABLISHED     27776
  TCP    192.168.1.48:4073      172.217.18.195:80      ESTABLISHED     3120
  TCP    192.168.1.48:4074      216.58.201.228:443     ESTABLISHED     3120
  TCP    192.168.1.48:4094      172.217.19.227:80      ESTABLISHED     27860
  TCP    192.168.1.48:4096      216.58.206.228:443     ESTABLISHED     27860
  TCP    192.168.1.48:4147      140.82.112.26:443      ESTABLISHED     24692
  TCP    192.168.1.48:4321      104.89.26.169:443      ESTABLISHED     3120
  TCP    192.168.1.48:4339      2.16.124.147:443       CLOSE_WAIT      27860
  TCP    192.168.1.48:4340      2.16.124.147:443       CLOSE_WAIT      27860
  TCP    192.168.1.48:4342      104.89.26.169:443      CLOSE_WAIT      27860
  TCP    192.168.1.48:4343      104.89.26.169:443      CLOSE_WAIT      27860
  TCP    192.168.1.48:4344      104.89.26.169:443      CLOSE_WAIT      27860
  TCP    192.168.1.48:4369      140.82.113.25:443      ESTABLISHED     24692
  TCP    192.168.1.48:4394      23.54.60.107:443       ESTABLISHED     27860
  TCP    192.168.1.48:4489      104.121.2.24:80        ESTABLISHED     3120
  TCP    192.168.1.48:4499      23.46.164.132:443      ESTABLISHED     3120
  TCP    192.168.1.48:4500      2.16.124.147:443       ESTABLISHED     3120
  TCP    192.168.1.48:4501      2.16.124.147:443       ESTABLISHED     3120
  TCP    192.168.1.48:4502      2.16.124.147:443       ESTABLISHED     3120
  TCP    192.168.1.48:4503      104.89.26.169:443      ESTABLISHED     3120
  TCP    192.168.1.48:4504      104.89.26.169:443      ESTABLISHED     3120
  TCP    192.168.1.48:4505      104.89.26.169:443      ESTABLISHED     3120
  TCP    192.168.1.48:4508      104.121.2.24:80        ESTABLISHED     3120
  TCP    192.168.1.48:4510      108.177.15.188:5228    ESTABLISHED     27860
  TCP    192.168.1.48:4520      173.194.76.188:5228    ESTABLISHED     3120
  TCP    192.168.1.48:4522      52.23.6.186:443        ESTABLISHED     3804
  TCP    192.168.1.48:4523      34.252.159.0:443       ESTABLISHED     3804
  TCP    192.168.1.48:63554     40.67.254.36:443       ESTABLISHED     5044
  TCP    192.168.1.48:63679     35.190.242.132:4070    ESTABLISHED     27776
  TCP    192.168.1.48:63739     3.216.58.47:443        ESTABLISHED     3804
  TCP    192.168.1.48:63796     63.33.237.65:443       ESTABLISHED     3804
  TCP    192.168.1.48:64548     112.175.87.93:11001    ESTABLISHED     3120
  TCP    192.168.1.48:64662     112.175.87.94:11006    ESTABLISHED     27860
  TCP    192.168.19.1:139       0.0.0.0:0              LISTENING       4
  TCP    192.168.33.1:139       0.0.0.0:0              LISTENING       4
  TCP    192.168.56.1:139       0.0.0.0:0              LISTENING       4
  TCP    [::]:80                [::]:0                 LISTENING       4
  TCP    [::]:135               [::]:0                 LISTENING       1464
  TCP    [::]:445               [::]:0                 LISTENING       4
  TCP    [::]:1337              [::]:0                 LISTENING       4620
  TCP    [::]:2861              [::]:0                 LISTENING       4
  TCP    [::]:2871              [::]:0                 LISTENING       4
  TCP    [::]:2882              [::]:0                 LISTENING       4
  TCP    [::]:2883              [::]:0                 LISTENING       4
  TCP    [::]:5357              [::]:0                 LISTENING       4
  TCP    [::]:5426              [::]:0                 LISTENING       4
  TCP    [::]:49664             [::]:0                 LISTENING       648
  TCP    [::]:49665             [::]:0                 LISTENING       588
  TCP    [::]:49666             [::]:0                 LISTENING       1424
  TCP    [::]:49667             [::]:0                 LISTENING       2508
  TCP    [::]:49668             [::]:0                 LISTENING       2908
  TCP    [::]:49669             [::]:0                 LISTENING       3812
  TCP    [::]:49824             [::]:0                 LISTENING       984
  TCP    [::]:54235             [::]:0                 LISTENING       4
  TCP    [::]:54236             [::]:0                 LISTENING       4
  TCP    [::1]:5426             [::1]:63441            ESTABLISHED     4
  TCP    [::1]:5426             [::1]:63444            ESTABLISHED     4
  TCP    [::1]:5426             [::1]:63447            ESTABLISHED     4
  TCP    [::1]:5426             [::1]:63450            ESTABLISHED     4
  TCP    [::1]:63441            [::1]:5426             ESTABLISHED     43528
  TCP    [::1]:63444            [::1]:5426             ESTABLISHED     43528
  TCP    [::1]:63447            [::1]:5426             ESTABLISHED     43528
  TCP    [::1]:63450            [::1]:5426             ESTABLISHED     43528
  TCP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:3924  [2406:da14:88d:a101:cc32:cca8:d247:5617]:443  ESTABLISHED     24692
  TCP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:4518  [2406:da14:88d:a101:cc32:cca8:d247:5617]:443  ESTABLISHED     24692
  TCP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:4519  [2406:da14:88d:a101:cc32:cca8:d247:5617]:443  CLOSE_WAIT      24692
  TCP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:63949  [2a00:1450:400c:c0c::bc]:5228  ESTABLISHED     24692
  TCP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:64250  [2600:9000:219c:8800:d:8082:3c40:93a1]:80  FIN_WAIT_2      15792
  TCP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:64262  [2600:1901:0:94b6::]:443  ESTABLISHED     15792
  UDP    0.0.0.0:500            *:*                                    4204
  UDP    0.0.0.0:3702           *:*                                    18112
  UDP    0.0.0.0:3702           *:*                                    19880
  UDP    0.0.0.0:3702           *:*                                    18112
  UDP    0.0.0.0:3702           *:*                                    19880
  UDP    0.0.0.0:4500           *:*                                    4204
  UDP    0.0.0.0:5050           *:*                                    5928
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    27776
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    27776
  UDP    0.0.0.0:5353           *:*                                    27776
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    27776
  UDP    0.0.0.0:5353           *:*                                    3316
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    27776
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    35036
  UDP    0.0.0.0:5353           *:*                                    27776
  UDP    0.0.0.0:5355           *:*                                    3316
  UDP    0.0.0.0:50386          *:*                                    4580
  UDP    0.0.0.0:51328          *:*                                    3120
  UDP    0.0.0.0:51329          *:*                                    3120
  UDP    0.0.0.0:51330          *:*                                    3120
  UDP    0.0.0.0:51331          *:*                                    3120
  UDP    0.0.0.0:54123          *:*                                    3120
  UDP    0.0.0.0:54316          *:*                                    3120
  UDP    0.0.0.0:54819          *:*                                    3120
  UDP    0.0.0.0:56873          *:*                                    24692
  UDP    0.0.0.0:56907          *:*                                    24692
  UDP    0.0.0.0:57621          *:*                                    27776
  UDP    0.0.0.0:58091          *:*                                    19880
  UDP    0.0.0.0:59097          *:*                                    3120
  UDP    0.0.0.0:59465          *:*                                    18112
  UDP    0.0.0.0:59597          *:*                                    3120
  UDP    0.0.0.0:59599          *:*                                    27860
  UDP    0.0.0.0:59600          *:*                                    27860
  UDP    0.0.0.0:62965          *:*                                    27776
  UDP    0.0.0.0:62966          *:*                                    27776
  UDP    0.0.0.0:62967          *:*                                    27776
  UDP    0.0.0.0:62968          *:*                                    27776
  UDP    0.0.0.0:62969          *:*                                    27776
  UDP    0.0.0.0:62970          *:*                                    27776
  UDP    0.0.0.0:65246          *:*                                    3120
  UDP    0.0.0.0:65247          *:*                                    3120
  UDP    10.2.1.1:137           *:*                                    4
  UDP    10.2.1.1:138           *:*                                    4
  UDP    10.2.1.1:1900          *:*                                    15016
  UDP    10.2.1.1:2177          *:*                                    20468
  UDP    10.2.1.1:5353          *:*                                    4580
  UDP    10.2.1.1:54901         *:*                                    15016
  UDP    10.4.1.1:137           *:*                                    4
  UDP    10.4.1.1:138           *:*                                    4
  UDP    10.4.1.1:1900          *:*                                    15016
  UDP    10.4.1.1:2177          *:*                                    20468
  UDP    10.4.1.1:5353          *:*                                    4580
  UDP    10.4.1.1:54904         *:*                                    15016
  UDP    127.0.0.1:1900         *:*                                    15016
  UDP    127.0.0.1:2921         *:*                                    3120
  UDP    127.0.0.1:2922         *:*                                    27860
  UDP    127.0.0.1:10020        *:*                                    37500
  UDP    127.0.0.1:12010        *:*                                    3120
  UDP    127.0.0.1:12130        *:*                                    27860
  UDP    127.0.0.1:54907        *:*                                    15016
  UDP    127.0.0.1:59565        *:*                                    4764
  UDP    127.0.0.1:60671        *:*                                    43560
  UDP    192.168.1.48:137       *:*                                    4
  UDP    192.168.1.48:138       *:*                                    4
  UDP    192.168.1.48:1900      *:*                                    15016
  UDP    192.168.1.48:2177      *:*                                    20468
  UDP    192.168.1.48:5353      *:*                                    4580
  UDP    192.168.1.48:54902     *:*                                    15016
  UDP    192.168.19.1:137       *:*                                    4
  UDP    192.168.19.1:138       *:*                                    4
  UDP    192.168.19.1:1900      *:*                                    15016
  UDP    192.168.19.1:2177      *:*                                    20468
  UDP    192.168.19.1:5353      *:*                                    4580
  UDP    192.168.19.1:54906     *:*                                    15016
  UDP    192.168.33.1:137       *:*                                    4
  UDP    192.168.33.1:138       *:*                                    4
  UDP    192.168.33.1:1900      *:*                                    15016
  UDP    192.168.33.1:2177      *:*                                    20468
  UDP    192.168.33.1:5353      *:*                                    4580
  UDP    192.168.33.1:54905     *:*                                    15016
  UDP    192.168.56.1:137       *:*                                    4
  UDP    192.168.56.1:138       *:*                                    4
  UDP    192.168.56.1:1900      *:*                                    15016
  UDP    192.168.56.1:2177      *:*                                    20468
  UDP    192.168.56.1:5353      *:*                                    4580
  UDP    192.168.56.1:54903     *:*                                    15016
  UDP    [::]:500               *:*                                    4204
  UDP    [::]:3702              *:*                                    19880
  UDP    [::]:3702              *:*                                    18112
  UDP    [::]:3702              *:*                                    18112
  UDP    [::]:3702              *:*                                    19880
  UDP    [::]:4500              *:*                                    4204
  UDP    [::]:5353              *:*                                    35036
  UDP    [::]:5353              *:*                                    35036
  UDP    [::]:5353              *:*                                    35036
  UDP    [::]:5353              *:*                                    35036
  UDP    [::]:5353              *:*                                    35036
  UDP    [::]:5353              *:*                                    35036
  UDP    [::]:5353              *:*                                    3316
  UDP    [::]:5355              *:*                                    3316
  UDP    [::]:50387             *:*                                    4580
  UDP    [::]:56873             *:*                                    24692
  UDP    [::]:56907             *:*                                    24692
  UDP    [::]:58092             *:*                                    19880
  UDP    [::]:59466             *:*                                    18112
  UDP    [::1]:1900             *:*                                    15016
  UDP    [::1]:5353             *:*                                    4580
  UDP    [::1]:54899            *:*                                    15016
  UDP    [2a01:cb19:664:f900:49ce:a019:4313:bf32]:2177  *:*                                    20468
  UDP    [2a01:cb19:664:f900:88cb:4eb5:e58e:438e]:2177  *:*                                    20468
  UDP    [fe80::4856:bfa0:c97f:a602%20]:1900  *:*                                    15016
  UDP    [fe80::4856:bfa0:c97f:a602%20]:2177  *:*                                    20468
  UDP    [fe80::4856:bfa0:c97f:a602%20]:54896  *:*                                    15016
  UDP    [fe80::49ce:a019:4313:bf32%12]:1900  *:*                                    15016
  UDP    [fe80::49ce:a019:4313:bf32%12]:2177  *:*                                    20468
  UDP    [fe80::49ce:a019:4313:bf32%12]:54894  *:*                                    15016
  UDP    [fe80::4c0a:f3e6:3e2d:fde%17]:1900  *:*                                    15016
  UDP    [fe80::4c0a:f3e6:3e2d:fde%17]:2177  *:*                                    20468
  UDP    [fe80::4c0a:f3e6:3e2d:fde%17]:54895  *:*                                    15016
  UDP    [fe80::d195:cb2b:7e58:ad2e%19]:1900  *:*                                    15016
  UDP    [fe80::d195:cb2b:7e58:ad2e%19]:2177  *:*                                    20468
  UDP    [fe80::d195:cb2b:7e58:ad2e%19]:54898  *:*                                    15016
  UDP    [fe80::d8c1:972b:4a4b:7e69%18]:1900  *:*                                    15016
  UDP    [fe80::d8c1:972b:4a4b:7e69%18]:2177  *:*                                    20468
  UDP    [fe80::d8c1:972b:4a4b:7e69%18]:54897  *:*                                    15016
  UDP    [fe80::f5f8:2c08:9d14:c5de%11]:1900  *:*                                    15016
  UDP    [fe80::f5f8:2c08:9d14:c5de%11]:2177  *:*                                    20468
  UDP    [fe80::f5f8:2c08:9d14:c5de%11]:54893  *:*                                    15016
```
```
PS C:\Users\killi>  Get-Process | Where-Object {$_.mainWindowTitle} | Format-Table Id, Name, mainWindowtitle -AutoSize

   Id Name                    MainWindowTitle
   -- ----                    ---------------
35036 chrome                  Processeur Intel® Core™ i7-9750H (12 Mo de cache, jusqu'à 4,50 GHz) Caractéristiques techniques - Google Chrome
19040 Discord                 #uii - Discord
27048 msinfo32                Informations système
33180 powershell              Windows PowerShell
27776 Spotify                 Spotify Premium
```
35036 chrome 

Chrome est un navigateur web qui tourne sur le port 35036 en UDP.

19040 Discord

Discord est un logiciel de communication.

```
PS C:\Users\killi> Get-LocalUser

Name               Enabled Description
----               ------- -----------
Administrateur     False   Compte d’utilisateur d’administration
DefaultAccount     False   Compte utilisateur géré par le système.
Invité             False   Compte d’utilisateur invité
Killian            True
WDAGUtilityAccount False   Compte d’utilisateur géré et utilisé par le système pour les scénarios Windows Defender A...
YNOV01             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV02             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV03             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV04             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV05             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV06             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV07             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV08             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV09             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV10             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV11             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV12             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV13             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV14             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV15             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV16             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV17             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV18             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV19             True    Local user account for execution of R scripts in SQL Server instance YNOV
YNOV20             True    Local user account for execution of R scripts in SQL Server instance YNOV
```
l'utilisateur admin de la machine est KIllian
```
Name               Enabled Description
----               ------- -----------
Administrateur     False   Compte d’utilisateur d’administration
DefaultAccount     False   Compte utilisateur géré par le système.
Invité             False   Compte d’utilisateur invité
Killian            True
```

```
PS C:\Users\killi> tasklist /v

Nom de l’image                 PID Nom de la sessio Numéro de s Utilisation  État            Nom d’utilisateur                                  Temps proces Titre de la fenêtre
========================= ======== ================ =========== ============ =============== ================================================== ============ ========================================================================
System Idle Process              0 Services                   0         8 Ko Unknown         AUTORITE NT\Système                                    11:31:13 N/A
System                           4 Services                   0       156 Ko Unknown         N/A                                                     0:08:02 N/A
Registry                       144 Services                   0    58 424 Ko Unknown         N/A                                                     0:00:01 N/A
smss.exe                       752 Services                   0     1 068 Ko Unknown         N/A                                                     0:00:00 N/A
csrss.exe                      996 Services                   0     4 708 Ko Unknown         N/A                                                     0:00:01 N/A
wininit.exe                    648 Services                   0     5 436 Ko Unknown         N/A                                                     0:00:00 N/A
csrss.exe                      664 Console                    1     4 784 Ko Running         N/A                                                     0:01:24 N/A
services.exe                   888 Services                   0    13 836 Ko Unknown         N/A                                                     0:00:08 N/A
lsass.exe                      952 Services                   0    22 372 Ko Unknown         N/A                                                     0:00:03 N/A
winlogon.exe                  1096 Console                    1     9 808 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   1184 Services                   0     3 348 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   1252 Services                   0    29 204 Ko Unknown         N/A                                                     0:00:09 N/A
fontdrvhost.exe               1276 Services                   0     2 644 Ko Unknown         N/A                                                     0:00:00 N/A
fontdrvhost.exe               1288 Console                    1     5 088 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   1432 Services                   0    15 616 Ko Unknown         N/A                                                     0:00:11 N/A
svchost.exe                   1484 Services                   0     9 276 Ko Unknown         N/A                                                     0:00:00 N/A
dwm.exe                       1568 Console                    1    54 608 Ko Running         N/A                                                     0:05:02 DWM Notification Window
svchost.exe                   1640 Services                   0     7 752 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   1452 Services                   0    13 736 Ko Unknown         N/A                                                     0:00:02 N/A
svchost.exe                   2116 Services                   0     9 576 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2176 Services                   0     9 404 Ko Unknown         N/A                                                     0:00:02 N/A
NVDisplay.Container.exe       2184 Services                   0    11 584 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2276 Services                   0    16 976 Ko Unknown         N/A                                                     0:00:05 N/A
svchost.exe                   2312 Services                   0    13 264 Ko Unknown         N/A                                                     0:00:01 N/A
svchost.exe                   2340 Services                   0     5 712 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2452 Services                   0    12 256 Ko Unknown         N/A                                                     0:00:09 N/A
svchost.exe                   2460 Services                   0     4 960 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2468 Services                   0     7 360 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2476 Services                   0     6 300 Ko Unknown         N/A                                                     0:00:00 N/A
Memory Compression            2596 Services                   0   938 364 Ko Unknown         N/A                                                     0:01:09 N/A
svchost.exe                   2656 Services                   0     6 996 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2680 Services                   0     7 260 Ko Unknown         N/A                                                     0:00:00 N/A
igfxCUIService.exe            2724 Services                   0     6 816 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2784 Services                   0     8 392 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2804 Services                   0     6 820 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   2816 Services                   0     6 884 Ko Unknown         N/A                                                     0:00:02 N/A
NVDisplay.Container.exe       2952 Console                    1    25 884 Ko Running         N/A                                                     0:00:03 UxdService
svchost.exe                   3028 Services                   0    46 688 Ko Unknown         N/A                                                     0:00:51 N/A
audiodg.exe                   2336 Services                   0    26 044 Ko Unknown         N/A                                                     0:05:15 N/A
svchost.exe                   3092 Services                   0    11 232 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3100 Services                   0     6 980 Ko Unknown         N/A                                                     0:00:03 N/A
svchost.exe                   3108 Services                   0     5 744 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3116 Services                   0     7 828 Ko Unknown         N/A                                                     0:00:14 N/A
svchost.exe                   3392 Services                   0    10 972 Ko Unknown         N/A                                                     0:00:02 N/A
svchost.exe                   3500 Services                   0     8 128 Ko Unknown         N/A                                                     0:00:03 N/A
svchost.exe                   3676 Services                   0     6 724 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3760 Services                   0    14 760 Ko Unknown         N/A                                                     0:00:01 N/A
svchost.exe                   3856 Services                   0     8 252 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3968 Services                   0    13 032 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3976 Services                   0     6 136 Ko Unknown         N/A                                                     0:00:00 N/A
spoolsv.exe                   4048 Services                   0    10 392 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4088 Services                   0     7 912 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3196 Services                   0    37 708 Ko Unknown         N/A                                                     0:00:10 N/A
svchost.exe                   3672 Services                   0    13 116 Ko Unknown         N/A                                                     0:00:01 N/A
wlanext.exe                   4076 Services                   0    13 536 Ko Unknown         N/A                                                     0:00:00 N/A
conhost.exe                   4104 Services                   0     4 124 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4376 Services                   0     6 368 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4384 Services                   0     6 188 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4664 Services                   0    25 420 Ko Unknown         N/A                                                     0:00:02 N/A
svchost.exe                   4676 Services                   0    13 780 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4684 Services                   0     5 688 Ko Unknown         N/A                                                     0:00:00 N/A
IntelCpHDCPSvc.exe            4692 Services                   0     5 592 Ko Unknown         N/A                                                     0:00:00 N/A
EvtEng.exe                    4704 Services                   0    11 152 Ko Unknown         N/A                                                     0:00:00 N/A
MSIService.exe                4716 Services                   0     7 524 Ko Unknown         N/A                                                     0:00:00 N/A
AdobeUpdateService.exe        4724 Services                   0     7 376 Ko Unknown         N/A                                                     0:00:00 N/A
MSIAPService.exe              4740 Services                   0    12 784 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4748 Services                   0    27 816 Ko Unknown         N/A                                                     0:00:07 N/A
NahimicService.exe            4756 Services                   0    16 432 Ko Unknown         N/A                                                     0:00:01 N/A
avp.exe                       4772 Services                   0    99 836 Ko Unknown         N/A                                                     0:04:11 N/A
FNPLicensingService64.exe     4780 Services                   0     6 544 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4788 Services                   0     6 620 Ko Unknown         N/A                                                     0:00:00 N/A
RzSDKServer.exe               4796 Services                   0     7 108 Ko Unknown         N/A                                                     0:00:00 N/A
RtkAudUService64.exe          4804 Services                   0     7 116 Ko Unknown         N/A                                                     0:00:00 N/A
RstMwService.exe              4812 Services                   0     4 692 Ko Unknown         N/A                                                     0:00:00 N/A
RzSDKService.exe              4820 Services                   0     7 308 Ko Unknown         N/A                                                     0:00:18 N/A
AGSService.exe                4828 Services                   0     7 944 Ko Unknown         N/A                                                     0:00:00 N/A
sqlwriter.exe                 4836 Services                   0     6 024 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4844 Services                   0     4 536 Ko Unknown         N/A                                                     0:00:00 N/A
nvcontainer.exe               4852 Services                   0    31 972 Ko Unknown         N/A                                                     0:00:01 N/A
GameManagerService.exe        4860 Services                   0    23 536 Ko Unknown         N/A                                                     0:00:00 N/A
RazerCentralService.exe       4872 Services                   0    36 600 Ko Unknown         N/A                                                     0:00:01 N/A
vmware-usbarbitrator64.ex     4880 Services                   0     8 128 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4888 Services                   0    18 120 Ko Unknown         N/A                                                     0:00:00 N/A
AGMService.exe                4896 Services                   0     8 568 Ko Unknown         N/A                                                     0:00:01 N/A
vmware-authd.exe              4904 Services                   0    10 456 Ko Unknown         N/A                                                     0:00:11 N/A
svchost.exe                   4920 Services                   0     9 620 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4928 Services                   0     5 268 Ko Unknown         N/A                                                     0:00:00 N/A
vmnat.exe                     4948 Services                   0     5 952 Ko Unknown         N/A                                                     0:00:00 N/A
Sendevsvc.exe                 4960 Services                   0    29 964 Ko Unknown         N/A                                                     0:00:01 N/A
vmnetdhcp.exe                 4980 Services                   0     4 156 Ko Unknown         N/A                                                     0:00:00 N/A
RegSrvc.exe                   4988 Services                   0     7 200 Ko Unknown         N/A                                                     0:00:00 N/A
OfficeClickToRun.exe          5000 Services                   0    30 988 Ko Unknown         N/A                                                     0:00:01 N/A
ZeroConfigService.exe         5008 Services                   0    14 980 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   5360 Services                   0     4 632 Ko Unknown         N/A                                                     0:00:00 N/A
KillerNetworkService.exe      5520 Services                   0    19 560 Ko Unknown         N/A                                                     0:00:09 N/A
svchost.exe                   5584 Services                   0     8 168 Ko Unknown         N/A                                                     0:00:00 N/A
IntelCpHeciSvc.exe            5456 Services                   0     5 020 Ko Unknown         N/A                                                     0:00:00 N/A
xTendUtilityService.exe       2432 Services                   0    12 912 Ko Unknown         N/A                                                     0:00:00 N/A
sqlservr.exe                  6272 Services                   0   132 760 Ko Unknown         N/A                                                     0:08:24 N/A
ReportingServicesService.     6280 Services                   0   111 012 Ko Unknown         N/A                                                     0:00:03 N/A
sqlceip.exe                   6320 Services                   0    40 784 Ko Unknown         N/A                                                     0:00:00 N/A
xTendUtility.exe              6688 Services                   0     6 520 Ko Unknown         N/A                                                     0:00:00 N/A
conhost.exe                   6792 Services                   0     5 924 Ko Unknown         N/A                                                     0:00:00 N/A
rundll32.exe                  6868 Console                    1     6 956 Ko Running         N/A                                                     0:00:00 RxDiag Message Pump 2019 NVIDIA Corporation Dec  3 2019 19:35:17
svchost.exe                   7296 Services                   0     6 232 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   7492 Services                   0     8 124 Ko Unknown         N/A                                                     0:00:00 N/A
Razer Synapse Service.exe     7936 Services                   0    67 796 Ko Unknown         N/A                                                     0:00:07 N/A
unsecapp.exe                  7684 Services                   0     6 064 Ko Unknown         N/A                                                     0:00:00 N/A
WmiPrvSE.exe                  8224 Services                   0    12 364 Ko Unknown         N/A                                                     0:00:00 N/A
Microsoft.ReportingServic     6236 Services                   0    54 168 Ko Unknown         N/A                                                     0:00:02 N/A
conhost.exe                   6780 Services                   0     5 680 Ko Unknown         N/A                                                     0:00:00 N/A
Launchpad.exe                 9704 Services                   0    14 924 Ko Unknown         N/A                                                     0:00:00 N/A
fdlauncher.exe                9728 Services                   0     4 432 Ko Unknown         N/A                                                     0:00:00 N/A
fdhost.exe                    9812 Services                   0     5 288 Ko Unknown         N/A                                                     0:00:00 N/A
conhost.exe                   9840 Services                   0     4 492 Ko Unknown         N/A                                                     0:00:00 N/A
SearchIndexer.exe            10048 Services                   0    37 044 Ko Unknown         N/A                                                     0:00:07 N/A
svchost.exe                   8584 Services                   0     8 200 Ko Unknown         N/A                                                     0:00:00 N/A
dllhost.exe                  10812 Services                   0     8 744 Ko Unknown         N/A                                                     0:00:00 N/A
nvcontainer.exe              11012 Console                    1    32 124 Ko Running         MSI\Killian                                             0:00:09 BroadcastListenerWindow
sihost.exe                   11080 Console                    1    26 788 Ko Running         MSI\Killian                                             0:00:03 N/A
svchost.exe                  11088 Console                    1    22 976 Ko Unknown         MSI\Killian                                             0:00:06 N/A
PresentationFontCache.exe    11148 Services                   0    14 808 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                  11228 Console                    1    29 920 Ko Running         MSI\Killian                                             0:00:01 Windows Push Notifications Platform
svchost.exe                  11236 Services                   0    15 460 Ko Unknown         N/A                                                     0:00:02 N/A
Razer Synapse Service Pro     7640 Console                    1    45 376 Ko Running         MSI\Killian                                             0:00:04 .NET-BroadcastEventWindow.4.0.0.0.2eed1ca.0
taskhostw.exe                10588 Console                    1    14 672 Ko Running         MSI\Killian                                             0:00:00 Task Host Window
explorer.exe                 10964 Console                    1   115 428 Ko Running         MSI\Killian                                             0:01:02 N/A
igfxEM.exe                   10980 Console                    1    18 596 Ko Running         MSI\Killian                                             0:00:02 The Event Manager Dashboard
svchost.exe                  11352 Services                   0     7 020 Ko Unknown         N/A                                                     0:00:00 N/A
ctfmon.exe                   11476 Console                    1    14 588 Ko Running         MSI\Killian                                             0:00:03 N/A
GoogleCrashHandler.exe       11752 Services                   0     1 032 Ko Unknown         N/A                                                     0:00:00 N/A
GoogleCrashHandler64.exe     11776 Services                   0       936 Ko Unknown         N/A                                                     0:00:00 N/A
NVIDIA Web Helper.exe        11888 Console                    1     1 652 Ko Running         MSI\Killian                                             0:00:01 {5AEA657D-F3F5-4BD8-BFE9-A4B537FA24C3}
svchost.exe                  11908 Console                    1    27 812 Ko Running         MSI\Killian                                             0:00:00 OLEChannelWnd
TSVNCache.exe                11528 Console                    1     7 480 Ko Running         MSI\Killian                                             0:00:00 TSVNCacheWindow
ShellExperienceHost.exe      11748 Console                    1    83 416 Ko Running         MSI\Killian                                             0:00:01 Démarrer
SearchUI.exe                 12344 Console                    1   235 448 Ko Running         MSI\Killian                                             0:00:14 Cortana
RuntimeBroker.exe            12424 Console                    1    24 176 Ko Running         MSI\Killian                                             0:00:01 OleMainThreadWndName
avpui.exe                    12516 Console                    1     3 624 Ko Running         MSI\Killian                                             0:00:12 CiceroUIWndFrame
conhost.exe                  12684 Console                    1     1 072 Ko Unknown         MSI\Killian                                             0:00:00 N/A
RuntimeBroker.exe            13260 Console                    1    34 832 Ko Running         MSI\Killian                                             0:00:04 N/A
RemindersServer.exe          12320 Console                    1    20 452 Ko Unknown         MSI\Killian                                             0:00:00 N/A
svchost.exe                  12292 Services                   0     9 176 Ko Unknown         N/A                                                     0:00:00 N/A
YourPhone.exe                10896 Console                    1        80 Ko Running         MSI\Killian                                             0:00:00 N/A
RuntimeBroker.exe            13528 Console                    1    11 560 Ko Unknown         MSI\Killian                                             0:00:00 N/A
smartscreen.exe               6572 Console                    1    20 696 Ko Running         MSI\Killian                                             0:00:00 OleMainThreadWndName
Discord.exe                  12240 Console                    1    57 040 Ko Running         MSI\Killian                                             0:01:09 #uii - Discord
NahimicSvc64.exe             14372 Console                    1       988 Ko Running         MSI\Killian                                             0:00:01 N/A
NahimicSvc32.exe             14468 Console                    1     5 576 Ko Running         MSI\Killian                                             0:00:02 N/A
ApplicationFrameHost.exe     14328 Console                    1    18 604 Ko Unknown         MSI\Killian                                             0:00:00 N/A
Video.UI.exe                 12128 Console                    1        56 Ko Running         MSI\Killian                                             0:00:00 N/A
RuntimeBroker.exe            14212 Console                    1    19 680 Ko Unknown         MSI\Killian                                             0:00:01 N/A
RuntimeBroker.exe            15780 Console                    1     7 668 Ko Unknown         MSI\Killian                                             0:00:00 N/A
Discord.exe                  15972 Console                    1    74 436 Ko Running         MSI\Killian                                             0:00:27 N/A
Discord.exe                  16116 Console                    1    23 696 Ko Unknown         MSI\Killian                                             0:00:03 N/A
CCXProcess.exe               16336 Console                    1     2 052 Ko Unknown         MSI\Killian                                             0:00:01 N/A
node.exe                     16356 Console                    1    45 860 Ko Not Responding  MSI\Killian                                             0:00:05 OleMainThreadWndName
conhost.exe                  14392 Console                    1     4 620 Ko Unknown         MSI\Killian                                             0:00:00 N/A
svchost.exe                   8500 Services                   0    11 404 Ko Unknown         N/A                                                     0:00:01 N/A
svchost.exe                  12296 Services                   0     6 380 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   1696 Services                   0     5 000 Ko Unknown         N/A                                                     0:00:00 N/A
Creative Cloud.exe            1976 Console                    1    59 004 Ko Running         MSI\Killian                                             0:00:24 Creative Cloud Desktop
AdobeIPCBroker.exe            2376 Console                    1    11 472 Ko Running         MSI\Killian                                             0:00:05 N/A
Adobe CEF Helper.exe          4612 Console                    1    21 988 Ko Unknown         MSI\Killian                                             0:00:04 N/A
Adobe Desktop Service.exe     4600 Console                    1    63 368 Ko Running         MSI\Killian                                             0:00:35 N/A
Adobe CEF Helper.exe          4644 Console                    1    32 584 Ko Unknown         MSI\Killian                                             0:00:05 N/A
Adobe CEF Helper.exe          1156 Console                    1   119 172 Ko Unknown         MSI\Killian                                             0:00:16 N/A
CCLibrary.exe                16324 Console                    1     2 036 Ko Unknown         MSI\Killian                                             0:00:01 N/A
node.exe                      4588 Console                    1    41 992 Ko Not Responding  MSI\Killian                                             0:00:09 OleMainThreadWndName
conhost.exe                  16788 Console                    1     4 688 Ko Unknown         MSI\Killian                                             0:00:00 N/A
svchost.exe                   3148 Services                   0     9 968 Ko Unknown         N/A                                                     0:00:00 N/A
Discord.exe                   4608 Console                    1    11 112 Ko Running         MSI\Killian                                             0:00:00 N/A
CoreSync.exe                 15280 Console                    1    30 440 Ko Running         MSI\Killian                                             0:00:06 Core Sync
AdobeNotificationClient.e    18260 Console                    1       164 Ko Running         MSI\Killian                                             0:00:00 N/A
RuntimeBroker.exe            17792 Console                    1     5 632 Ko Unknown         MSI\Killian                                             0:00:00 N/A
Discord.exe                  17684 Console                    1   176 632 Ko Running         MSI\Killian                                             0:21:24 OLEChannelWnd
Adobe CEF Helper.exe         18092 Console                    1    21 748 Ko Unknown         MSI\Killian                                             0:00:03 N/A
Discord.exe                  13576 Console                    1    15 524 Ko Unknown         MSI\Killian                                             0:00:00 N/A
svchost.exe                  18276 Services                   0     6 636 Ko Unknown         N/A                                                     0:00:00 N/A
dasHost.exe                  18000 Services                   0    14 656 Ko Unknown         N/A                                                     0:00:00 N/A
WUDFHost.exe                  1316 Services                   0     7 052 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                  16076 Services                   0    16 060 Ko Unknown         N/A                                                     0:00:00 N/A
WUDFHost.exe                  3416 Services                   0     6 812 Ko Unknown         N/A                                                     0:00:00 N/A
Dragon Center.exe             6360 Console                    1    21 748 Ko Running         MSI\Killian                                             0:00:02 N/A
HD-MultiInstanceManager.e     4188 Console                    1    59 780 Ko Running         MSI\Killian                                             0:00:06 BlueStacks Multi-Instance Manager
HD-Agent.exe                 19292 Console                    1     8 992 Ko Running         MSI\Killian                                             0:00:05 N/A
Bluestacks.exe               10988 Console                    1    11 720 Ko Running         MSI\Killian                                             0:01:04 global
BstkSVC.exe                  18932 Console                    1    14 264 Ko Running         MSI\Killian                                             0:00:00 VBoxPowerNotifyClass
LocationNotificationWindo     9756 Console                    1     1 032 Ko Running         MSI\Killian                                             0:00:00 Notification d'emplacement
Bluestacks.exe               18896 Console                    1    43 972 Ko Not Responding  MSI\Killian                                             0:00:00 OleMainThreadWndName
HD-Player.exe                12956 Console                    1    38 212 Ko Not Responding  MSI\Killian                                             1:49:16 PgaDummy
Bluestacks.exe               15388 Console                    1    52 268 Ko Not Responding  MSI\Killian                                             0:00:01 OleMainThreadWndName
svchost.exe                   4244 Console                    1    19 236 Ko Unknown         MSI\Killian                                             0:00:00 N/A
IAStorDataMgrSvc.exe          1832 Services                   0    37 384 Ko Unknown         N/A                                                     0:00:01 N/A
SgrmBroker.exe                6656 Services                   0     6 216 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3348 Services                   0    12 980 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   3812 Services                   0     9 572 Ko Unknown         N/A                                                     0:00:00 N/A
SecurityHealthService.exe     1040 Services                   0    10 776 Ko Unknown         N/A                                                     0:00:00 N/A
chrome.exe                   18956 Console                    1   124 672 Ko Running         MSI\Killian                                             0:00:32 
chrome.exe                   16780 Console                    1    42 064 Ko Unknown         MSI\Killian                                             0:00:02 N/A
HD-Player.exe                 7820 Console                    1    31 080 Ko Not Responding  MSI\Killian                                             1:42:14 PgaDummy
Bluestacks.exe                8244 Console                    1    56 164 Ko Not Responding  MSI\Killian                                             0:00:01 OleMainThreadWndName
WindowsInternal.Composabl    12960 Console                    1    38 216 Ko Running         MSI\Killian                                             0:00:00 Microsoft Text Input Application
dllhost.exe                   5072 Console                    1    11 756 Ko Running         MSI\Killian                                             0:00:00 OleMainThreadWndName
powershell.exe                2284 Console                    1    56 152 Ko Running         MSI\Killian                                             0:00:01 Windows PowerShell
conhost.exe                   8968 Console                    1    13 824 Ko Running         MSI\Killian                                             0:00:00 N/A
WmiPrvSE.exe                  3412 Services                   0     7 360 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                  11104 Services                   0     7 884 Ko Unknown         N/A                                                     0:00:00 N/A
chrome.exe                    8164 Console                    1    17 824 Ko Unknown         MSI\Killian                                             0:00:00 N/A
RiotClientServices.exe       15412 Console                    1    93 280 Ko Unknown         MSI\Killian                                             0:00:08 N/A
RiotClientCrashHandler.ex     6444 Console                    1     7 568 Ko Running         MSI\Killian                                             0:00:00 N/A
LeagueClient.exe              9024 Console                    1   114 100 Ko Running         MSI\Killian                                             0:01:37 Test
LeagueCrashHandler.exe        3432 Console                    1     7 532 Ko Running         MSI\Killian                                             0:00:00 N/A
LeagueClientUx.exe            1628 Console                    1    85 224 Ko Running         MSI\Killian                                             0:00:33 League of Legends
LeagueClientUxRender.exe      9188 Console                    1    99 044 Ko Unknown         MSI\Killian                                             0:03:12 N/A
LeagueClientUxRender.exe      4540 Console                    1   497 404 Ko Unknown         MSI\Killian                                             0:04:59 N/A
GameBarPresenceWriter.exe    19580 Console                    1     6 068 Ko Unknown         MSI\Killian                                             0:00:00 N/A
svchost.exe                  19616 Services                   0     8 484 Ko Unknown         N/A                                                     0:00:00 N/A
GameBar.exe                  19868 Console                    1    62 612 Ko Running         MSI\Killian                                             0:00:26 N/A
RuntimeBroker.exe            19968 Console                    1    18 532 Ko Running         MSI\Killian                                             0:00:00 OleMainThreadWndName
GameBarFT.exe                20136 Console                    1    16 192 Ko Running         MSI\Killian                                             0:00:00 OleMainThreadWndName
GameBarFTServer.exe          20252 Console                    1    24 752 Ko Running         MSI\Killian                                             0:01:01 OleMainThreadWndName
svchost.exe                  16136 Services                   0     5 716 Ko Unknown         N/A                                                     0:00:00 N/A
WmiPrvSE.exe                 20912 Services                   0    12 704 Ko Unknown         N/A                                                     0:00:01 N/A
WmiPrvSE.exe                 21164 Services                   0     7 768 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                  21132 Services                   0     7 696 Ko Unknown         N/A                                                     0:00:00 N/A
svchost.exe                   4936 Services                   0    24 276 Ko Unknown         N/A                                                     0:00:00 N/A
tasklist.exe                 14996 Console                    1     9 032 Ko Unknown         MSI\Killian                                             0:00:00 N/A
```
csrss.exe : il gère toute les fenêtre et les éléments graphique du système windows.

tasklist.exe: il est un fichier exécutable sur le disque dur . Il contient un code machine.

winlogon.exe: réalise la fonction de gestion de connexion Windows, traitant la connexion de l'utilisateur et sa fermeture de session dans Windows.

IGFXEM.EXE: C’est à dire des exécutables autour de votre carte graphique Intel. Ainsi, seuls les PC avec une carte graphique Intel auront ce processus.

WmiPrvSE.exe: Celui-ci permet aux applications installées sur votre machine de demander des informations sur votre système.

#### Scripting:

script 1:
```
  
# Buton Killian
# Fait le 17/04/2020
# Se script affiche les composants de mon pc

Write-Output "Nom de la machine : $env:COMPUTERNAME" 
Write-Output "Adress IP principal : "
Write-Output "OS : $env:OS" 
Write-Output "Version de l'OS : $((Get-CimInstance Win32_OperatingSystem).version)"  
Write-Output "Uptime : $((get-date) - $((gcim Win32_OperatingSystem)).LastBootUpTime)"
Write-Output "Is OS up-to-date : "
Write-Output "RAM : " 
Write-Output "Utilisation : "
Write-Output "Espace libre : $(Get-CimInstance Win32_PhysicalMemory | Measure-Object -Property capacity -Sum | Foreach {"{0:N2}" -f ([math]::round(($_.Sum / 1GB),2))})"
Write-Output "Espace disque"
Write-Output "Espace disque utilise : "
Get-WmiObject win32_logicaldisk | Format-Table DeviceId, @{n = "Size"; e = { [math]::Round($_.Size / 1GB, 2) } }, @{n = "UsedSpace"; e = { [math]::Round(($_.Size - $_.FreeSpace) / 1GB, 2) } }
Write-Output "Espace disque dispo : "
Get-WmiObject win32_logicaldisk | Format-Table DeviceId, @{n = "Size"; e = { [math]::Round($_.Size / 1GB, 2) } }, @{n = "FreeSpace"; e = { [math]::Round($_.FreeSpace / 1GB, 2) } }
Write-Output "Liste des Utilisateur : "
Get-LocalUser | Format-Table
ping 8.8.8.8
```
script 2:
```
# Buton Killian
# Fait le 18/04/2020
# Se script permet éteindre le PC après 10 secondes 

Start-Sleep -s 15
rundll32.exe user32.dll, LockWorkStation
Stop-Computer
```

#### Gestion de softs

Un gestionnaire de paquets  est un outil automatisant le processus d'installation, désinstallation, mise à jour de logiciels installés sur un système informatique. Aussi, cela nous permet d'être sûr que nous recevons bien le paquets qu'on veut télécharger. 

```
PS C:\Users\killi> choco list -li
Chocolatey v0.10.15
chocolatey 0.10.15
chocolatey-core.extension 1.3.5.1
chocolatey-dotnetfx.extension 1.0.1
chocolatey-visualstudio.extension 1.8.1
chocolatey-windowsupdate.extension 1.0.4
6 packages installed.

Active Directory Authentication Library pour SQL Server|14.0.800.90
Adobe Creative Cloud|5.1.0.407
Badlion Client 2.11.3|2.11.3
Blitz 1.8.0|1.8.0
BlueStacks App Player|4.190.0.5002
Browser pour SQL Server 2016|13.1.4001.0
Discord|0.0.306
Enregistreur VSS Microsoft pour SQL Server 2016|13.1.4001.0
Epic Games Launcher|1.1.220.0
f.lux|
Fichiers de support d installation de Microsoft SQL Server 2008|10.3.5500.0
GIMP 2.10.12|2.10.12
Git version 2.23.0.windows.1|2.23.0.windows.1
GitHub Desktop|2.2.4
GNS3|2.2.5
Google Chrome|81.0.4044.129
Intel(R) Computing Improvement Program|2.4.05718
Intel(R) Processor Graphics|26.20.100.8141
Intel(R) Rapid Storage Technology|16.8.2.1002
Intel® Driver &amp; Support Assistant|20.4.17.5
Intel® OptaneT Pinning Explorer Extensions|16.8.2.1002
Intel® PROSet/Wireless Software|20.80.0.0u
IntelliJ IDEA 2019.2.4|192.7142.36
Java 8 Update 251 (64-bit)|8.0.2510.8
League of Legends|
Legends of Runeterra|
Microsoft Office 365 ProPlus - fr-fr|16.0.12527.20442
Microsoft OneDrive|19.232.1124.0012
Microsoft SQL Server 2012 Native Client |11.3.6518.0
Microsoft SQL Server 2016 (64-bit)|
Microsoft SQL Server 2016 Setup (English)|13.1.4259.0
Microsoft SQL Server 2016 T-SQL Language Service |13.0.14500.10
Microsoft SQL Server 2017 RC1|
Microsoft SQL Server Data-Tier Application Framework (x86) - fr-FR|14.0.3757.2
Microsoft SQL Server Management Studio - 17.2|14.0.17177.0
Microsoft SQL Server 2014 Management Objects |12.0.2000.8
Microsoft SQL Server 2016 T-SQL ScriptDom|13.1.4001.0
Microsoft System CLR Types pour SQL Server 2017 RC1|14.0.800.90
Microsoft System CLR Types pour SQL Server 2014|12.0.2402.11
Microsoft Teams|1.3.00.8663
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148|9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161|9.0.30729.6161
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148|9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161|9.0.30729.6161
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219|10.0.40219
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219|10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030|11.0.61030.0
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030|11.0.61030.0
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005|12.0.21005.1
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660|12.0.40660.0
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005|12.0.21005.1
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005|12.0.21005.1
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660|12.0.40660.0
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127|14.24.28127.4
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820|14.23.27820.0
Microsoft Visual Studio Code (User)|1.44.2
Microsoft Visual Studio Installer|1.18.1104.625
Minecraft Launcher|1.0.0.0
Module linguistique Microsoft Help Viewer 2.2 - FRA|2.2.23107
Mozilla Firefox 75.0 (x64 fr)|75.0
Mozilla Maintenance Service|69.0.2
Nmap 7.80|7.80
Node.js|12.16.1
Npcap 0.9983|0.9983
NVIDIA GeForce Experience 3.20.3.63|3.20.3.63
NVIDIA Logiciel système PhysX 9.19.0218|9.19.0218
NVIDIA Pilote graphique 445.87|445.87
Oracle VM VirtualBox 6.1.4|6.1.4
Overwolf|0.142.0.22
Prise en charge linguistique de Microsoft Visual Studio Tools for Applications 2015|14.0.23107.20
Python 3.7.6 (64-bit)|3.7.6150.0
Python Launcher|3.7.6925.0
Service de langage T-SQL Microsoft SQL Server 2017 RC1|14.0.17177.0
Stratégies Microsoft SQL Server 2017 RC1|14.0.800.90
Teams Machine-Wide Installer|1.2.0.17057
TFTactics|0.3.8
TortoiseSVN 1.13.1.28686 (64 bit)|1.13.28686
VMware VIX|1.15.0.00000
Wampserver64 3.1.9|3.1.9
Windows SDK AddOn|10.1.0.0
Windows Software Development Kit - Windows 10.0.17763.132|10.1.17763.132
WinRAR 5.70 (32-bit)|5.70.0
Wireshark 3.0.6 64-bit|3.0.6
XAMPP|7.4.5-0
83 applications not managed with Chocolatey.
```
### Certificat
l'information principal transporté par le certicat est la clé publique.
Les autres informations importante en terme de sécurité sont les signature numérique.
### Partage de fichier

![](https://i.imgur.com/ifYpVlK.png)


### Chiffrement

Un certificat électronique fonctionne a l'aide d'une clé publique et peux être vu comme une carte d'identité numérique. Il est utilisé principalement pour identifier et authentifier une personne physique ou morale, mais aussi pour chiffrer des échanges.

chiffrement de mail:
 on commence par généré les clés pour le client et le destinaire 

```
 ssh-keygen -t rsa
```
ensuite a l'aide SignTool.exe j'ai signé numériquement mes mail puis je l'es envoyé a l'aide de gmail S/MIME.


### TLS

HTTP est une connection ou les données ne sont pas chiffrées
HTTPS est une connexions ou les données sont chiffrées.
En plus de chiffrer les données transmises entre un serveur et votre navigateur, le protocole TLS authentifie également le serveur auquel vous vous connectez et protège les données transmises de toute altération.
Le ssl qui est contenue dans le HTTPS permet la sécurisation du voyage.
Les avantages en termes de sécurité mentionnés plus haut, soit l’authentification du serveur, le chiffrement des échanges de données et leur protection contre les altérations, sont les avantages évidents et principaux du protocole HTTPS.

### ssh jumping 
```
Host jump
    User <jump-user>
    HostName <jump-host>
Host protected
    User <protected-user>
    HostName <protected-host>
    ProxyJump jump
```
### Forwarding de ports at home

```
[Killian@pc-554 ~]$ ping -c 2 192.168.1.23
PING 192.168.1.23 (192.168.1.23) 56(84) bytes of data.
64 bytes from 192.168.1.23: icmp_seq=1 ttl=64 time=0.358 ms
64 bytes from 192.168.1.23: icmp_seq=2 ttl=64 time=0.516 ms
64 bytes from 192.168.1.23: icmp_seq=3 ttl=64 time=0.456 ms
--- 192.168.1.23 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1001ms
rtt min/avg/max/mdev = 0.358/0.437/0.516/0.079 ms

```