Home

Harden Windows Security GitHub Wiki content

AppControl Manager

• Create AppControl Policy
• Create Supplemental Policy
• System Information
• Configure Policy Rule Options
• Policy Editor
• Simulation
• Allow New Apps
• Build New Certificate
• Create Policy From Event Logs
• Create Policy From MDE Advanced Hunting
• Create Deny Policy
• Merge App Control Policies
• Deploy App Control Policy
• Get Code Integrity Hashes
• Get Secure Policy Settings
• Update
• Sidebar
• Validate Policies
• View File Certificates
• Microsoft Graph
• Firewall Sentinel

Harden System Security

• Protect

  • Microsoft Security Baselines
  • Microsoft Security Baselines Overrides
  • Microsoft 365 Apps Security Baseline
  • Microsoft Defender
  • Attack Surface Reduction
  • BitLocker
  • Device Guard
  • TLS Security
  • Lock Screen
  • User Account Control
  • Windows Firewall
  • Optional Windows Features
  • Windows Networking
  • Miscellaneous Configurations
  • Windows Update
  • Edge Browser
  • Certificate Checking
  • Country IP Blocking
  • Non Admin Measures

• Group Policy Editor

• Manage Installed Apps

• File Reputation

• Audit Policies

• Cryptographic Bill of Materials

• Intune

• Configuration Service Provider (CSP)

• Service Manager

• Extras

  • Duplicate Photos Finder

  • EXIF Manager

  • Bootable Driver Maker

App Control for Business

• Introduction
• How To Generate Audit Logs via App Control Policies
• How To Create an App Control Supplemental Policy
• How to Create an App Control Deny Policy
• The Strength of Signed App Control Policies
• How To Upload App Control Policies To Intune Using AppControl Manager
• How To Create and Maintain Strict Kernel‐Mode App Control Policy
• App Control Notes
• How to use Windows Server to Create App Control Code Signing Certificate
• Fast and Automatic Microsoft Recommended Driver Block Rules updates
• App Control policy for BYOVD Kernel mode only protection
• EKUs in App Control for Business Policies
• App Control Rule Levels Comparison and Guide
• Script Enforcement and PowerShell Constrained Language Mode in App Control Policies
• How to Use Microsoft Defender for Endpoint Advanced Hunting With App Control
• App Control Frequently Asked Questions (FAQs)
• System Integrity Policy Transformations | XML to CIP and Back
• About Code Integrity Policy Signing

Miscellaneous

• DISM API in Packaged Apps and the Mechanics of Child Process Identity
• How To Install Microsoft Store Apps Completely Offline
• Create Bootable USB flash drive with no 3rd party tools
• Event Viewer
• Group Policy
• How to compact your OS and free up extra space
• Hyper V
• Git GitHub Desktop and Mandatory ASLR
• Signed and Verified commits with GitHub desktop
• About TLS, DNS, Encryption and OPSEC concepts
• Things to do when clean installing Windows
• Comparison of security benchmarks
• BitLocker, TPM and Pluton | What Are They and How Do They Work
• How to Detect Changes in User and Local Machine Certificate Stores in Real Time Using PowerShell
• Cloning Personal and Enterprise Repositories Using GitHub Desktop
• Only a Small Portion of The Windows OS Security Apparatus
• Rethinking Trust: Advanced Security Measures for High‐Stakes Systems

Azure

• Clean Source principle, Azure and Privileged Access Workstations
• How to Securely Connect to Azure VMs and Use RDP

PowerShell

• Basic PowerShell tricks and notes
• Basic PowerShell tricks and notes Part 2
• Basic PowerShell tricks and notes Part 3
• Basic PowerShell tricks and notes Part 4
• Basic PowerShell tricks and notes Part 5
• How To Access All Stream Outputs From Thread Jobs In PowerShell In Real Time
• PowerShell Best Practices To Follow When Coding
• How To Asynchronously Access All Stream Outputs From Background Jobs In PowerShell
• Powershell Dynamic Parameters and How to Add Them to the Get‐Help Syntax
• RunSpaces In PowerShell
• How To Use Reflection And Prevent Using Internal & Private C# Methods in PowerShell

Microsoft Cloud

• Microsoft Graph Explorer and API Basics

C#

• C# Tips And Tricks Part 1