search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.66k stars 927 forks source link

Configuration: Disable the officekey #519

Open binjo opened 1 year ago

binjo commented 1 year ago

Details

As detailed in this post, the default mapping of Alt+Shift+Ctrl+Win is to open Office applications. This is annoying when the user has hyper key set just the same. The provided solution should be good for adding into debloat configs:

REG ADD HKCU\Software\Classes\ms-officeapp\Shell\Open\Command /t REG_SZ /d rundll32

This will not affect the shortcuts of some built-in features, might need another workaround for them.

Alt+Shift+Ctrl+Win+E to open Excel
Alt+Shift+Ctrl+Win+D to open OneDrive
Alt+Shift+Ctrl+Win+P to open PowerPoint
Alt+Shift+Ctrl+Win+L to open LinkedIn
Alt+Shift+Ctrl+Win+T to open Teams
...
Ana06 commented 1 year ago

Thanks ideas @binjo! @mandiant/commando-vm is this something you want as well? should we add it into the debloat package or into our flare-vm config?

day1player commented 1 year ago

Sounds good to me