Question

Networking questions:

1. You need to perform a basic ping scan and write the output file to a text file named 10-PingSweep.txt. You must utilize a “for loop” with the ping command in windows. It should be for the following sweep – 192.168.111.1-254. Provide the command to be placed into a cmd.exe shell. (Note – only valid Reply responses should be in the text file. Your exact command will be tested.)

2. You are working on a potential incident response issue on localhost. You need to check two different things on a Windows machine in the command line. Provide two commands. The first command should list currently logged in users. The second command should list all users created on the local machine.

3. You are still working on the same Windows machine listed in Question 2. Provide a command that lists all running services on the Windows machine.

4. On the same windows machine, you are concerned if any firewalls rules have been created. Provide a command to list all firewall rules and output the list to a file named FIREWALLRULES.txt.

5 . Provide a cmd.exe shell command that provides all systems information and output the results to a file name sysinfo.txt.

Answer 1

1:

(for /L %a IN (1,1,254) DO ping /n 1 /w 3 192.168.111.%a ) | find "Reply" > "10PingSweep.txt"

2:

query user //list all users curently logged

net user //list all users created on local machine

3

net start //list all running services

sc queryex type=service //list all rrunning services with detailed properties

4

netsh advfirewall firewall show rule name=all > "FIREWALLRULES.txt"   

5.

systeminfo > sysinfo.txt //provides all systems information in file named sysinfo.txt