《安全内参》是专注于网络安全产业发展和行业应用的高端智库平台，依托于专业的安全团队和国内外产业和行业智库的专家团队，为网络安全相关政府主管、行业、企业和机构的管理者、决策者和从业者提供全球视野、高价值的安全知识和安全智慧，致力于成为网络安全首席知识官。
安全牛是中国网络安全领域的专业媒体和旗舰智库，精确定位并服务于CISO/CSO/CTO/CIO决策者人群，向国内企业的决策管理者以及IT专业人士提供独立客观、高品质、有价值的战略性网络安全内容。安全牛致力于推动中国企业跨越"安全鸿沟"，促进中国网络安全产业的健康发展。
You need to have PowerShell 3.0 or above to run the
The following link is Windows Management Framework 5.1
https://www.microsoft.com/en-us/download/details.aspx?id=54616
Run PowerShell under admin right:
1. Enable PowerShell to run script:
Set-ExecutionPolicy RemoteSigned
2. Run the pre-requirement check of install WMF5.1 by using the PowerShell "Install0WMF5.1.ps1"
Please note that for Windows 7 and Windows Server 2008 R2 the installation instructions have changed significantly. Please read the Install and Configure topic in the release notes. We have removed the requirement for pre-installing WMF 4 on Windows 7 and Windows Server 2008 R2, but to do so we had create a script for checking the prerequisites that accompanies the MSU in a ZIP file. WMF 5.1 requires .Net version 4.5.2, and cannot be installed on Windows 7 or Windows Server 2008 R2 if WMF 3.0 is installed. This affects only Windows 7 and Windows Server 2008 R2. The Install and Configure topic in the release notes provides details on using the script.
3. Reboot the computer is required after upgrade the WMF
4. Follow the instruction to valid those servers and application
Before install the patch
After install the Patch:
To enable the mitigations
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0 /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f
Reference:
https://betanews.com/2018/01/05/microsoft-powershell-meltdown-spectre-script/
Eraser is an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Works with Windows 98, ME, NT, 2000, XP, Vista, Windows Server 2003 and Server 2008.
Eraser is Free software and its source code is released under GNU General Public License.
http://eraser.heidi.ie/index.php
The program source is a .exe, we can unpackaged it into a .msi file and install the msi by using command with no user interactive. We can use this exe file via GPO deploy of this software.
And also, this software is support command line (not official support – may be support in the future)
The Eraser’s default file erasure method – Gutmann is the most secure method of the program provide and it should be delete those data securely* (not able to recover)
The Gutmann method is an algorithm for securely erasing the contents of computer hard drives, such as files. Devised by Peter Gutmann and Colin Plumb, it does so by writing a series of 35 patterns over the region to be erased.
* There is currently no published evidence as to intelligence agencies' ability to recover files whose sectors have been overwritten, although published Government security procedures clearly consider an overwritten disk to still be sensitive.
Companies specializing in recovery of damaged media (e.g., media damaged by fire, water or otherwise) cannot recover completely overwritten files. No private data recovery company currently claims that it can reconstruct completely overwritten data.
Reference:
http://en.wikipedia.org/wiki/Gutmann_method
http://en.wikipedia.org/wiki/Peter_Gutmann_%28computer_scientist%29
