Score:0

Network drives autoplay

in flag

I am having some trouble figuring out what some SMB requests to an AutoRun.inf file are.

My situation is this, i have a fileserver Windows Server 2016, and all my workstations mount a shared drive from this server.

My IDS system that captures and analyzes the traffic is showing some "suspicious" stuff. The workstation tries to access an Autorun.inf on the shared drive, and terminates with a file not found message. So everytime the user opens the shared drive, it searches for an autorun.inf file and not find it there.

Is this normal behaviour or something fishy is going on?

Thanks Teo

br flag
are you in control of the workstations, if so just disable autorun. See [this article for some ideas](https://www.nucleustechnologies.com/blog/three-methods-to-disable-autorun-in-windows-10/)
cn flag
`Is this normal behaviour`. It is for systems that aren't secured. Autorun is dangerous and should always be disabled.
Teo B avatar
in flag
I have autorun disabled on all drives by gpo.
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.