Christoph Kolbicz @_kolbicz
IT-Consultant @axacomag (CCE-V, CCE-N, MCSE, VCP), interested in Reverse Engineering, Jailbreaking and #XMR. Developer of SetUserFTA. Owner of Kolbicz IT. kolbi.cz/blog Brasilien Joined August 2017-
Tweets818
-
Followers721
-
Following269
-
Likes703
KB5064081 updates UCPD.sys to v4.4 with four new features and shifts several older ones into the base protection layer. More details coming soon.
Microsoft is now enabling almost all the new features I covered in my blog on Windows 11 Pro. My test VM has most of them activated already - interestingly, file rename protection isn’t active yet.
Microsoft is now enabling almost all the new features I covered in my blog on Windows 11 Pro. My test VM has most of them activated already - interestingly, file rename protection isn’t active yet.
New blog post: UCPD.sys – UserChoice Protection Driver Part 2: kolbi.cz/blog/2025/07/1…
UCPD.sys v4.3 is now rolling out on Windows 11. It brings 6 new protection features (currently inactive) - including one that blocks the file renaming attack 😬
Looks like Microsoft is rolling out the new hash protection more broadly - even my test VM just got migrated to UserChoiceLatest. Time to update @SetUserFTA, I guess 😬
Microsoft is A/B testing Office file extension protection via UCPD.sys (.doc/.docx/.xls/.xlsx/.ppt/.pptx) on consumer Windows (non-Enterprise, non-domain, non-EDU). This “feature” is now active for some as part of an experimental rollout. SetUserFTA can already handle this.
Since it's now blocked on Windows 11, I'm publishing a simple PoC to bypass UCPD.sys using RegRenameKey: github.com/kolbicz/UCPD.s… Original idea by @GHaslinger, but also discovered by Mozilla: searchfox.org/mozilla-centra…
It looks like UCPD.sys can now load dynamic rules from the registry and process them in real time — no update or reboot needed, similar to antivirus pattern updates. This is not active yet, but will extend deny/allow lists and other functions.
It looks like UCPD.sys can now load dynamic rules from the registry and process them in real time — no update or reboot needed, similar to antivirus pattern updates. This is not active yet, but will extend deny/allow lists and other functions.
Windows 11 is now getting UCPD.sys v4.2. The update activates features that block several workarounds used by various software products, including SetUserFTA, which already handles the change by falling back to alternative methods. More info soon.
UCPD.sys v4.1.1 fixes this bug - now rolling out to Windows 10 as well.
UCPD.sys v4.1.1 fixes this bug - now rolling out to Windows 10 as well.
🚨 New Blog Post: UserChoiceLatest - Microsoft’s new protection mechanism for file type associations. What it changes, how it impacts file association management, and what it means for tools like SetUserFTA. kolbi.cz/blog/2025/04/2…
For those wondering: that’s why UCPD.sys protects the UserChoiceLatest key too.
For those wondering: that’s why UCPD.sys protects the UserChoiceLatest key too.
This turned out way fancier than I expected. Thanks, Microsoft, for disrupting my sleep schedule and Easter holidays 🙃 But hey - it's solved now!
This turned out way fancier than I expected. Thanks, Microsoft, for disrupting my sleep schedule and Easter holidays 🙃 But hey - it's solved now!
Microsoft is A/B testing a new machine-bound UserChoice hash in Windows 11. Existing associations are migrated, but new UserChoice keys are ignored. The hash format has changed and must be recalculated. Nothing too fancy, actually. 😎
RELEASE: SetUserFTA v2.5.0 is now available. SilentFTA is included as a free add-on for all existing customers. Additionally, it properly handles the UCPD.sys v4.1 bug. The update is available through the download portal.
Confirmed: this bug remains unfixed in today’s public updates. Applies to Windows 11 with UCPD.sys v4.1.0.0. Windows 10 still uses v4.0.1.0, which isn’t affected.
Confirmed: this bug remains unfixed in today’s public updates. Applies to Windows 11 with UCPD.sys v4.1.0.0. Windows 10 still uses v4.0.1.0, which isn’t affected.
UCPD v4.1 has a bug that miscalculates string array indexes, causing it to block .html but not .htm. Clearly, the driver wasn’t meant to block these extensions yet.
Microsoft is rolling out UCPD.sys v4.1 on Windows 11, now protecting .htm and .html files. Previously, this was only the case on Insider builds. Windows 10 remains on UCPD v4.0.
Today, I tried to pay online, and Safari suggested an unknown credit card. No idea whose it is. I googled it, and apparently, this happens often?! The card was expired, and the CVV was missing, but still… 🤯
SetUserFTA now supports wildcards for get and find commands, making filtering and exporting simpler and more efficient:
Trond Eirik Haavarste... @xenappblog
9K Followers 2K Following Chief Automation Officer | Microsoft MVP | Citrix CTP | Nerdio NVP | Parallels VIPP Norwegian in Brazil 2012 | Sailed Caribbean 2005 - 2007 | $TSLA Robotaxi
Thorsten E. @endi24
5K Followers 6K Following Citrix, Windows Administrator, AppV, Automation, EUC, Application Packaging, Security, Virtualization, PowerShell
Julian Jakob @jakob_davidson
812 Followers 402 Following Hybrid Cloud Consultant | Microsoft MVP | Blogger at https://t.co/MP72TuzddO
Leee Jeffries @leeejeffries
2K Followers 669 Following I’m an IT Professional specializing in End User Computing Technologies, Former CTP, VIPP, MVP, EUC Forum UK Leadership, G0-EUC and DEXE!
René Bigler @dready73
3K Followers 524 Following Sysadmin | ICT in Education | EUC | Citrix Technology Professional (CTP) | Nutanix Technology Champion (NTC) | IGEL Tech Community Insider
Sacha Thomet @sacha81
2K Followers 2K Following DevSecOps Engineeer at a Swiss insurance, Microsoft MVP | #SwissEUC Leader, Xennial, Tech, EVs, VR/AR, Opinions are my own and not the views of my employer
Manuel Winkel @Deyda84
1K Followers 429 Following Citrix Technology Professional (CTP) - Presales Engineer at @ControlUp - Deyda Consulting - CCE-V - CCE-N - CCP-M - MCSA - MCSE - Father of 3
Thomas Poppelgaard @_POPPELGAARD
4K Followers 1K Following CEO & Technology Architect. (👨💻SME-GPU,AI,EUC,CLOUD,DATA,MR) industry🤴🏻awarded by NVIDIA, Microsoft,Citrix,VMware and Parallels
Trentent Tye @TrententTye
2K Followers 1K Following Former Microsoft MVP for AppV/RDS, former Citrix CTP, vExpert. Solving problems before anyone else. ControlUp employee. Opinions are my own. He/Him
Rory Monaghan @Rorymon
7K Followers 5K Following Host of the @5bytespodcast https://t.co/hJjxzIdDPl Galway United Supporter, Sponsor + Co-Op Member.
Ronnie Hamilton @RonnieDOTie
988 Followers 1K Following Nutanix NTC, NCAP, NPP, NUG Champion, Citrix CTA, CUGC leader Ireland, CCE-V,CCP-M, MCSA,CCNA working for Data Solutions. tweets are my own
Jan Tytgat 🇧🇪�... @jantytgat
885 Followers 1K Following Custodian of #NetScaler, artist formerly known as nsroot, #golang and #security enthusiast. Trying to use Neovim, On Arch btw. Former #CitrixCTP
Bjoern @bjoernmue
375 Followers 1K Following Citrix Technology Advocate (CTA) - Lead IT Consultant @msg_services - All about EUC & Digital Workspaces - #Citrix CCE-V / CCP-N
Markus Zehnle @markuszehnle
381 Followers 309 Following
Julian Mooren @citrixguyblog
2K Followers 913 Following Azure Cloud Architect ☁️ | Citrix Technology Professional (CTP) | Parallels VIPP | Co-Founder @vcbawue
Brian Timp @BrianTimp
712 Followers 1K Following Azure Junk | Devops Addict | ControlUp DEXe | EUC Enthousiast | OSD Dude | CloudOps Champion | ♥️ Power Apps | ♥️ Automation | ♥️ Biking | ♥️ Wine | ♥️ Food
James Rankin @james____rankin
4K Followers 408 Following Citrix CTP | AppSense ACA | EUC, AD, virtualization, digital transformation, cloud, mobile | Chief Media Hound at https://t.co/VUuMur8OUd
stevegreenberg @stevegreenberg
5K Followers 3K Following Founder Thin Client Computing. Architect/Implementer of many successful Enterprise projects. CTP Fellow, Geek, Musician, Martial artist, Husband and Father
Marco Zimmermann @MZett7
286 Followers 190 Following
Eugenie @e_shively74
268 Followers 3K Following
Andrea Monzani @aandrea_97
13 Followers 228 Following CyberSec PhD Student @ University of Milan @LaStatale Member of @lab_laser Unimi InfoSec lab.
Mo0n Sha𝄞ow @null001__
55 Followers 3K Following
Luan de Mattos @luan_demattos
156 Followers 1K Following Cybersecurity Analyst | Reverse Engineering and Malware Analysis Enthusiast. Tweets are my own.
crazyman @crazyman823886
1K Followers 1K Following CTFer / APT hunter / RedTeam / BlueTeam the member of @r3kapig the leader of @ShadowChasing1 CVE:CVE-2022-30190 pre account @CrazymanArmy
vlcnge @vlcnge
144 Followers 2K Following
Joe Hannon @JoeHannon52
519 Followers 1K Following Security researcher @ MSTIC, Microsoft https://t.co/8IO8nzNnAQ
Alex @0xr0y4l
0 Followers 418 Following
ZwClose @zwclose
1K Followers 58 Following
AlphaHunt Intelligenc... @alphahunt_io
55 Followers 131 Following Have a cyber/threat intel question? Just ask (or DM us)! https://t.co/x2Zgwjn6Q0 https://t.co/X7ESf3GDN2 by https://t.co/VS7Okzofao
Saif Noor Prottoy ⚔... @saifnoorprottoy
295 Followers 600 Following independent security researcher 🔨 : https://t.co/VOaAgGn5k6
jfxue @jfxue187359
4 Followers 63 Following
︎ ︎ @0xocdsec
4K Followers 7K Following ︎ ︎︎ ︎︎ ︎︎ ︎︎ ︎🏴☠️ ︎︎ ︎︎ ︎︎ ︎︎ ︎🌹︎ ︎︎ ︎︎ ︎︎ ︎︎ ︎ ︎︎🏴☠️︎ ︎︎ ︎︎ ︎︎ ︎︎ ︎💚︎︎ ︎︎ ︎︎ ︎︎ ︎︎ ︎🇺🇦 ︎︎ ︎︎ ︎︎ ︎︎ ︎︎|︎ ︎︎ ︎︎ ︎︎ ︎︎603,628 km² ︎ ︎︎
比个心 @vbigthing
92 Followers 4K Following
Ethical Hacker @offethhacker
2K Followers 5K Following
Danh Nguyen @ducdanh97
92 Followers 997 Following
`Ivan @Ivanlef0u
11K Followers 3K Following
kimbo4 @Be4orn
111 Followers 4K Following
sphere_c_q_re_ti @spher_c_q_re_ti
40 Followers 361 Following Hi, I am cybersecurity adept, PowerShell fan, cloud enthusiast. I am on twitter cause Sami Laiho said it is best place to keep up to date with security and IT.
pntasle @pntasle
24 Followers 88 Following
yanwei @wei_yan94107
0 Followers 2 Following
Kimberly George @KimberlyGe14880
4 Followers 54 Following Our company first t ransfer USDT to you TRC20, you return 90% to our BEP20, you get 10%, you get 2K per day Telegram g roup for details: https://t.co/d6UhrzSDdwHE1OGVh
Rusbel Gonzalez @GonzalezRu70236
0 Followers 2 Following
McBug @mc__bug
1 Followers 156 Following
Dan Martin @DanMartinUK
198 Followers 963 Following
Sascha Stumpler 💻 ... @SasStu
1K Followers 725 Following IT Professional working with #ConfigMgr #CM #MSIntune #M365 #Windows #OSD #PowerShell #Azure #EPM #LeastPrivilege
Akash @kauaska
17 Followers 291 Following
Luca Giardullo @GiardulloLuca
1 Followers 1K Following
Ctuna @Ctuna12
11 Followers 337 Following
ExhoAR22 @ExhoAR22
5 Followers 1K Following
FindmeX @LynnWsa
94 Followers 3K Following
Philipp Ziemke @phiz09
1 Followers 347 Following
Der SiloFof 🇺🇦 ... @aristoteles42
189 Followers 948 Following Don't be a dick. Even if you're talking to one.
Thomas Braukmann @ThomasBraukmann
24 Followers 263 Following
Andreas Schwanke 💉... @AndreasSchwanke
318 Followers 5K Following I search problems and try to find solutions. I try to empower my colleagues to achieve more. #PowerAddict #StickerAddict
gogogo131347 @gogogo131347
0 Followers 94 Following
Trond Eirik Haavarste... @xenappblog
9K Followers 2K Following Chief Automation Officer | Microsoft MVP | Citrix CTP | Nerdio NVP | Parallels VIPP Norwegian in Brazil 2012 | Sailed Caribbean 2005 - 2007 | $TSLA Robotaxi
Christiaan Brinkhoff @Brinkhoff_C
22K Followers 4K Following AI Product Leader for Windows Cloud, Bestselling Author (5), Keynote Speaker, Inventor (8) and podcast host 🎙️ https://t.co/mErKsF4eFp
Carl Stalhood @cstalhood
12K Followers 244 Following NetScaler. Citrix. Omnissa Tech Insider. Azure Virtual Desktop. Principal Consultant at CDW.
Helge Klein @HelgeKlein
5K Followers 128 Following Founder of vast limits, the uberAgent company. Developer of Delprof2 & SetACL. Ex Citrix CTP, Microsoft MVP & VMware vExpert. Born at 327 ppm.
Citrix User Group Com... @myCUGC
6K Followers 330 Following Citrix User Group Community • #myCUGC • For the Users, By the Users
René Bigler @dready73
3K Followers 524 Following Sysadmin | ICT in Education | EUC | Citrix Technology Professional (CTP) | Nutanix Technology Champion (NTC) | IGEL Tech Community Insider
Sacha Thomet @sacha81
2K Followers 2K Following DevSecOps Engineeer at a Swiss insurance, Microsoft MVP | #SwissEUC Leader, Xennial, Tech, EVs, VR/AR, Opinions are my own and not the views of my employer
Tobias J. Kreidl, PhD @tkreidl
3K Followers 199 Following Ex NAU ITS, Citrix #CitrixCTP & NVIDIA NGCA @NVIDIAVIRT, @myCUGC Steering Committee Pres. & 15 yrs. as astronomer, 25+ in IT. PhD in astronomy. Views are mine.
FSLogix @FSLogix
4K Followers 1K Following Microsoft FSLogix Profile, Office container and Appmasking for RDS, VDI, and Azure Virtual Desktop
Thomas Poppelgaard @_POPPELGAARD
4K Followers 1K Following CEO & Technology Architect. (👨💻SME-GPU,AI,EUC,CLOUD,DATA,MR) industry🤴🏻awarded by NVIDIA, Microsoft,Citrix,VMware and Parallels
Citrix @citrix
203K Followers 1K Following A Business Unit of Cloud Software Group. Empowering companies to deploy secure, remote apps and desktops to users at any scale.
Trentent Tye @TrententTye
2K Followers 1K Following Former Microsoft MVP for AppV/RDS, former Citrix CTP, vExpert. Solving problems before anyone else. ControlUp employee. Opinions are my own. He/Him
Marius Sandbu @msandbu
5K Followers 2K Following Azure MVP | vExpert NSX | VMware EUC Champion | Author | Speaker | AWS, Google | Blogger | Cloud Evangelist @SopraSteria_no
Julian Mooren @citrixguyblog
2K Followers 913 Following Azure Cloud Architect ☁️ | Citrix Technology Professional (CTP) | Parallels VIPP | Co-Founder @vcbawue
James Rankin @james____rankin
4K Followers 408 Following Citrix CTP | AppSense ACA | EUC, AD, virtualization, digital transformation, cloud, mobile | Chief Media Hound at https://t.co/VUuMur8OUd
NetScaler @NetScaler
50K Followers 2K Following Part of the Citrix Business Unit of Cloud Software Group. Follow @Citrix for all the latest NetScaler updates!
Marco Zimmermann @MZett7
286 Followers 190 Following
We don't deserve cats... @catsareblessing
174K Followers 9K Following Cats choose us; we don't own them 🫂 DM for Credit/removal
ZwClose @zwclose
1K Followers 58 Following
Horizon3 Attack Team @Horizon3Attack
12K Followers 56 Following @Horizon3ai Attack Team | Security Research | Exploit Dev | TTPs
Windows IT Pro @MSWindowsITPro
46K Followers 843 Following Microsoft's official feed for Windows IT pros. Keep up with the latest news, events, deployment resources, management tips and tricks, and more.
Windows Latest @WindowsLatest
28K Followers 7 Following We provide all the latest news and reviews of Microsoft, Windows, Windows Phone, Surface and Xbox devices. We are not affiliated with Microsoft.
FBI @FBI
3.9M Followers 2K Following Official FBI X account. Submit tips at https://t.co/tGqFRcJykB. Public info may be used for authorized purposes: https://t.co/x6bfDUEYeJ.
Dark Web Informer @DarkWebInformer
129K Followers 60 Following Providing Cyber Threat Intelligence from the Dark Web & Clearnet: Breaches, Ransomware, Darknet Markets, Threat Alerts & more. https://t.co/Fi7VW9lg94
Maxim Suhanov @errno_fail
1K Followers 54 Following Computer forensics, computer forensics tool validation, etc. https://t.co/vlNuwLiLI7 https://t.co/vYcKnqlN8Z @[email protected] 🕊
Clémentine Droux @BrumineShiyne
1 Followers 9 Following
Nixxes Software @NixxesSoftware
26K Followers 86 Following Making games better since 1999. Member of the @PlayStation Studios family since 2021. Developer of #SpiderManPC
Microsoft Exchange @MSFTExchange
68K Followers 0 Following The official Twitter account for Microsoft Exchange. This is not a support account. For support, contact @MicrosoftHelps or visit https://t.co/3bXLSeKar2.
BRICS News @BRICSinfo
1.7M Followers 3 Following We are an independent media company bringing you unparalleled coverage of all-things geo-politics & BRICS News in real-time.
Pirat_Nation 🔴 @Pirat_Nation
237K Followers 56 Following Gaming news | Tech | Films | Politics |Shiposting | PC Help | Dc: https://t.co/9jNP5Aekf7 alt: @piratnation
sixtyvividtails @sixtyvividtails
3K Followers 393 Following Currently working as an independent GUID merchant. Fully licensed. I acquire, produce, and sell high-quality GUIDs.
Windows Update @WindowsUpdate
82K Followers 510 Following Sharing the latest Windows as a service updates. For immediate assistance, please reach out to @MicrosoftHelps.
out of context brazil... @oocbrazill
431K Followers 29 Following follow us to see the extraordinary everyday brazilian life 🇧🇷 | [email protected] | GOAL: 440K
BleepingComputer @BleepinComputer
240K Followers 200 Following Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Global Government Aff... @GlobalAffairs
567K Followers 113 Following The voice of X's Global Government Affairs team
Lawrence Abrams @LawrenceAbrams
18K Followers 837 Following Ransomware, Online Security, and Malware. Owner, Editor in Chief of @bleepincomputer. DM on Signal: LawrenceA.11 * https://t.co/LXVRoICs8Z
Elias Limneos @limneos
57K Followers 563 Following iOS Developer of AnsweringMachine,BioProtect,CallBar,AudioRecorder(1st & #1 iOS call recorder) & many more. Repo: https://t.co/Sg9izQ1VTj
Boris Larin @oct0xor
18K Followers 655 Following Former console hacker (PS3/PS4). Hunting in the wild 0-days at Kaspersky GReAT. All tweets are my own.
xia0o0o0o @Nyaaaaa_ovo
3K Followers 1K Following Write some shit code. CTF with @r3kapig. Do shit security research. Currently at University of California, San Diego. DEFCON 31/32/33 finalist | LOOKING FOR JOB
しまりん🍡🍨 @straight_tamago
9K Followers 297 Following I am learning Flutter, Java, Swift, Objective-C.💕 I don't have technical skills (Manager @ChromiumCandy) (東のしまりん @ShimaRin220904) @misakaSoft
Cats for Happiness. @JoyfullCat
372K Followers 5 Following Meow moments captured! 📷 🐈Your daily dose of cat videos || Dm for Credit.
Dark Web Intelligence @DailyDarkWeb
138K Followers 0 Following Daily Dark Web dose from the dark side.
John Coates @JohnCoatesDev
11K Followers 2K Following Development (iOS, Swift) Creator of iOS app Flex: got a tweak request or need help making one? Use https://t.co/wBvxaNbCgx or https://t.co/7fzz3xFsKa
DXcool223_94 @DXcool223x
2K Followers 34 Following Jesus is my savior & I will put him first My, talent is reverse engineer iPhone & Apple TV Apps.
roothide @roothideDev
13K Followers 2K Following Make jailbreak easier to use on daily devices. Discord: https://t.co/NTmmon7Eqr
henning rosenbusch @rosenbusch_
97K Followers 1K Following Independent Journalist/photographer, committed to the truth to the best of my knowledge and belief since 2001.
Global Index @TheGlobal_Index
350K Followers 392 Following 📊 Stats / 🗺️ Maps / Viral Media 🚀 | ✉️ DM for business queries or Email: [email protected]
Fascinating @fasc1nate
3.3M Followers 2K Following Posting interesting science, gadgets, history, art, and more. Subscribe for in-depth posts. As an Amazon Associate I earn from qualifying purchases.
p0up0u @_p0up0u_
2K Followers 0 Following
Microsoft Threat Inte... @MsftSecIntel
187K Followers 1K Following We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
SwissLeak @SwissLeak
67 Followers 20 Following SwissLeak listet von Datenleaks betroffene Schweizer Behörden und bundesnahe Unternehmen. Finden Sie heraus, wie sicher die Schweiz ist..
Organized Crime and C... @OCCRP
197K Followers 2K Following We expose crime and corruption so the public can hold power to account. Support: https://t.co/osICI4Lcox RT ≠ endorsement
Dcsyhi @linux_n1
3K Followers 51 Following iOS Tweak Developer 🇵🇪🇯🇵 #Zetsu,#Airaw,#AirWall,#CarMovie
internet hall of fame @InternetH0F
3.9M Followers 411 Following the internet just wouldn't be the same without these iconic posts. credit ≠ endorsement
Myles Jeffery @mjthinkscape
749 Followers 210 Following Software developer at Thinkscape. Awarded Office 365 MVP in 2011 through 2016. Try Zee Drive, my SharePoint Online & OneDrive for Business drive mapping tool
OpenAI @OpenAI
4.3M Followers 3 Following OpenAI’s mission is to ensure that artificial general intelligence benefits all of humanity. We’re hiring: https://t.co/dJGr6Lg202![Hacker //
PS3-PSP-PSVITA-PC C/C++/C#/Java Developer 💻
Trophy Hunter 🏆
Anime lover 💙
[RIP] PS3SOS 🙏](https://pbs.twimg.com/profile_images/1931609444380479488/_W2luknm.jpg)
Nathan Martin 🇪�... @xXEvilnatXx
13K Followers 118 Following Hacker // PS3-PSP-PSVITA-PC C/C++/C#/Java Developer 💻 Trophy Hunter 🏆 Anime lover 💙 [RIP] PS3SOS 🙏Trends for United States
You might like
