Harden-Windows-Security
Standalone-Windows-Server-STIG-Script
| Harden-Windows-Security | Standalone-Windows-Server-STIG-Script | |
|---|---|---|
| 10 | 1 | |
| 1,241 | 58 | |
| - | - | |
| 9.9 | 6.2 | |
| 5 days ago | 8 months ago | |
| PowerShell | PowerShell | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Harden-Windows-Security
-
BitLocker, TPM and Pluton | What Are They and How Do They Work
We learned how important it is to use BitLocker and protect our data at rest. The Harden Windows Security repository employs BitLocker to encrypt the operation system drive and optionally any other drives that user chooses to. It utilizes the most secure configuration and military grade encryption algorithm, XTS-AES-256, TPM 2.0 and Start-up PIN.
-
Clean Source principle, Azure and Privileged Access Workstations
For more of a do-it-your-self experience, check out my harden windows security repository over at GitHub.
-
Comparison of security benchmarks and dangers of following them!
The benchmarks omit many new security features that the Harden Windows Security script implements.
- Created total BYOVD Kernel-level protection for Windows using Windows Defender Application Control
- WDAC policy for BYOVD Kernel mode only protection
- Created total BYOVD Kernel-level protection for Windows using Windows Defender Application Control and WDACConfig module
- Top Security Windows Configuration | Whitelist every single file and app in Windows easily 💯
- Windows Security Hardening Guide
-
Harden Windows Security the right way | Only with official supported well-documented methods | without breaking anything
Hi, made this GitHub repository for me at first, but then decided to work on the style to be suitable for public consumption. let me know if you have any question that I haven't already covered in the GitHub repo (including the Wiki), for code related questions please open a GitHub issue.
Standalone-Windows-Server-STIG-Script
What are some alternatives?
private-secure-windows - Privacy and security baseline for personal Windows 10 and Windows 11
HardeningKitty - HardeningKitty - Checks and hardens your Windows configuration
powershell-aes - A PowerShell script set to encrypt and decrypt file using AES algorithm.
CVE-2023-36884-Checker - Script to check for CVE-2023-36884 hardening
ocwd - Bulk download MIT OCW course resources at one click!
nginx-stigready-baseline - STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3
PersistenceSniper - Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
windows_hardening - HardeningKitty and Windows Hardening settings and configurations
windows-services-watcher - 🚦 Simple PowerShell script to watch and control windows services
ExploitProtection - Windows Exploit Protection Settings (Ultimate)
Windows-Optimize-Harden-Debloat - Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.
infraspective - Infrastructure testing using pester