Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Harden Windows Security Module v0.2.7 #161

Merged
merged 82 commits into from
Dec 15, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
82 commits
Select commit Hold shift + click to select a range
562a22b
Added missing position 0 parameter names
HotCakeX Dec 10, 2023
5894f3c
Improved code best practices
HotCakeX Dec 10, 2023
a466e04
Got rid of all the trailing whitespaces
HotCakeX Dec 10, 2023
36cde4c
Version bump
HotCakeX Dec 10, 2023
0875cc3
Adding the same changes from script to module
HotCakeX Dec 10, 2023
7f9565c
More trailing whitespace removal
HotCakeX Dec 10, 2023
c0f2298
Improved position 0 parameters
HotCakeX Dec 10, 2023
b4f2d3c
Parameter position 0 improvements
HotCakeX Dec 10, 2023
ffd1cf0
Parameter improvements
HotCakeX Dec 10, 2023
f6dde74
Update Harden-Windows-Security.ps1
HotCakeX Dec 10, 2023
ebdbf91
More Parameter improvements
HotCakeX Dec 10, 2023
8ea8101
Applied so many best practices in the code
HotCakeX Dec 10, 2023
e88232e
Function best practices improvements
HotCakeX Dec 10, 2023
b51f9e3
Updated function help sections
HotCakeX Dec 10, 2023
15ba37d
Improved error handling and function helps
HotCakeX Dec 11, 2023
7a941e3
General improvements
HotCakeX Dec 11, 2023
eeeb284
Position 0 parameter name definition improvements
HotCakeX Dec 11, 2023
d1cd277
Fixed a conflict of variable names between modules
HotCakeX Dec 11, 2023
01363e7
Improved parameters
HotCakeX Dec 11, 2023
66382d2
Improved comments
HotCakeX Dec 11, 2023
4f8d701
Merge branch 'main' into Harden-Windows-Security-Module-v.0.2.7
HotCakeX Dec 12, 2023
a2ec3c0
Merge branch 'main' into Harden-Windows-Security-Module-v.0.2.7
HotCakeX Dec 13, 2023
38bf594
Removed the Old unused stuff
HotCakeX Dec 13, 2023
4cbea76
typo fixes
HotCakeX Dec 13, 2023
eafe2ca
Fixed typos
HotCakeX Dec 13, 2023
3ef8a7f
Added positional parameter names
HotCakeX Dec 13, 2023
3057b65
Added workspace file to Harden-Windows-Security
HotCakeX Dec 13, 2023
4ef2732
Improved Unprotect-WindowsSecurity cmdlet
HotCakeX Dec 13, 2023
2ee3caf
Added native ConfirmImpact check
HotCakeX Dec 13, 2023
636fc4f
Improved function help and set cmdlet param values
HotCakeX Dec 13, 2023
f2c3de4
Improved function help sections
HotCakeX Dec 13, 2023
d31cf52
improved Secedit path
HotCakeX Dec 13, 2023
d00a495
Update Confirm-SystemCompliance.psm1
HotCakeX Dec 13, 2023
bd88b4f
Improved Confirm-SystemCompliance cmdlet
HotCakeX Dec 14, 2023
4248f81
module restructuring
HotCakeX Dec 14, 2023
33656a3
completed module restructuring
HotCakeX Dec 14, 2023
26e3794
Update Preloader.ps1
HotCakeX Dec 14, 2023
c364ab2
Removed unnecessary lines
HotCakeX Dec 14, 2023
ed17fcd
Improved the hardening script
HotCakeX Dec 14, 2023
dea4816
Reduced some int64s to int16
HotCakeX Dec 14, 2023
2de5e15
Updated both scripts inside and outside of module dir
HotCakeX Dec 14, 2023
2c6c810
Improved Windows feature management section
HotCakeX Dec 14, 2023
561ef3e
Removed trailing whitespace
HotCakeX Dec 14, 2023
cfcc4e0
Improved DISM module usage
HotCakeX Dec 14, 2023
ca1a445
Removed an unnecessary comment
HotCakeX Dec 14, 2023
b9c50bc
Assigned custom colors to optional features part
HotCakeX Dec 14, 2023
1775ad2
function help improvement
HotCakeX Dec 14, 2023
7aa02e8
Improved scheduled task PS code
HotCakeX Dec 14, 2023
793afa7
Changed a policy in Confirm-SystemCompliance
HotCakeX Dec 15, 2023
aef8322
Removed ConsentPromptBehaviorUser policy
HotCakeX Dec 15, 2023
00b199c
removed prompt for ConsentPromptBehaviorUser
HotCakeX Dec 15, 2023
00c0806
Readme update
HotCakeX Dec 15, 2023
c7f1547
Removed untrusted font blocking prompt
HotCakeX Dec 15, 2023
93439de
Removed untrusted font blocking from policies
HotCakeX Dec 15, 2023
1e621cb
Removed compliance check for untrusted font block
HotCakeX Dec 15, 2023
001539d
Update Confirm-SystemCompliance.psm1
HotCakeX Dec 15, 2023
6b6f735
Separated CTRL + ALT + DEL requirement policy
HotCakeX Dec 15, 2023
bde83c7
Fixed progress bars
HotCakeX Dec 15, 2023
dfd7d73
Added support for OS drives with label other than C
HotCakeX Dec 15, 2023
21f82bc
Added changes from module to the main script
HotCakeX Dec 15, 2023
024353f
Removed hardcoded OS label from scheduled task
HotCakeX Dec 15, 2023
ed78fc0
function relocation and version increase
HotCakeX Dec 15, 2023
3475fcd
Removed unnecessary trailing whitespaces
HotCakeX Dec 15, 2023
dec7620
typo fix
HotCakeX Dec 15, 2023
12f4522
Removed untrusted font blocking from the readme
HotCakeX Dec 15, 2023
4a44b8e
Updated readme regarding CTRL + ALT + DEL policy
HotCakeX Dec 15, 2023
e70b56b
Changed SecreString alias to its full type name
HotCakeX Dec 15, 2023
3664a19
Added CSP link to Enhanced mode search policy
HotCakeX Dec 15, 2023
417388d
Added CSP link for Windows time sync interval policy
HotCakeX Dec 15, 2023
0c84084
Added CSP links for the policies in the CSV file
HotCakeX Dec 15, 2023
04a03cd
Added CSP links for how to configure Edge CSPs
HotCakeX Dec 15, 2023
494f024
Updated recommended extension in workspace file
HotCakeX Dec 15, 2023
f36dbad
Hide the output of optional feature removals
HotCakeX Dec 15, 2023
08880cb
Updated a link for consistency
HotCakeX Dec 15, 2023
122f306
Updated workspace file with recommended extension
HotCakeX Dec 15, 2023
90217d5
Updated workspace file with spellchecker
HotCakeX Dec 15, 2023
41a1bd6
Fixed a typo
HotCakeX Dec 15, 2023
6ce6c45
Merge branch 'main' into Harden-Windows-Security-Module-v.0.2.7
HotCakeX Dec 15, 2023
81ac49c
Using stricter type for colors collection
HotCakeX Dec 15, 2023
20986ec
Improved variable casings and types
HotCakeX Dec 15, 2023
c19bfdb
Improved workspace file for spell checking
HotCakeX Dec 15, 2023
9ce985a
Update Harden-Windows-Security Module.code-workspace
HotCakeX Dec 15, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/ISSUE_TEMPLATE/Bug_Report.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -8,18 +8,18 @@ body:
- type: markdown
attributes:
value: |
Thanks for taking the time to fill out this bug report!
Thanks for taking the time to fill out this bug report!
- type: dropdown
id: version
attributes:
label: Tools category
description: Which category/tool does this bug belong to?
options:
options:
- Harden Windows Security Module
- WDACConfig Module
- Harden Windows Security Script
validations:
required: true
required: true
- type: checkboxes
id: Requirements
attributes:
Expand All @@ -43,4 +43,4 @@ body:
description: Please explain the bug and be as detailed as possible. 🙏
placeholder: "There is a problem with..."
validations:
required: true
required: true
6 changes: 3 additions & 3 deletions .github/ISSUE_TEMPLATE/Security_Measure_Suggestion.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ body:
- type: markdown
attributes:
value: |
Thanks for taking the time to suggest a new Security measure!
Thanks for taking the time to suggest a new Security measure!
- type: checkboxes
id: Not-Duplicate
attributes:
Expand All @@ -25,5 +25,5 @@ body:
description: Please explain your new Security measure suggestion and be as detailed as possible. 🙏
placeholder: "I want to suggest..."
validations:
required: true
required: true

2 changes: 1 addition & 1 deletion .github/workflows/VirusTotal.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,5 +19,5 @@ jobs:
VTAPIsecret: ${{ secrets.VTAPI }}
shell: pwsh
run: |

./.github/Workflowstuff/VirusTotal
Original file line number Diff line number Diff line change
@@ -0,0 +1,219 @@
{
"folders": [
{
"path": "."
}
],
"settings": {
"powershell.codeFormatting.autoCorrectAliases": true,
"powershell.codeFormatting.avoidSemicolonsAsLineTerminators": true,
"powershell.codeFormatting.trimWhitespaceAroundPipe": true,
"powershell.codeFormatting.useConstantStrings": true,
"powershell.codeFormatting.useCorrectCasing": true,
"powershell.codeFormatting.whitespaceBetweenParameters": true,
"json.schemas": [],
"cSpell.enableFiletypes": [
"*"
],
"cSpell.maxNumberOfProblems": 200,
"cSpell.words": [
"accepteula",
"ADMX",
"Alloc",
"allowautoupdatesmetered",
"AMSI",
"antimalware",
"Antispyware",
"antiviruses",
"APNG",
"ASLR",
"authenticode",
"backdoors",
"Bafs",
"bcdboot",
"bcdedit",
"Betternet",
"Bitlocker",
"blocklist",
"blocklists",
"Bootable",
"Bstr",
"BYOVD",
"catname",
"CDROM",
"CHACHA",
"Cipolicy",
"Citool",
"CMOS",
"COMPANYNAME",
"computername",
"CRSP",
"cyberattack",
"Datacenter",
"DFCI",
"DISM",
"DNSSEC",
"domainfirewall",
"Dont",
"driversipolicy",
"DWORD",
"Entra",
"Eventlog",
"experimentations",
"EXTERNALMODULEDEPENDENCIES",
"EXTERNALSCRIPTDEPENDENCIES",
"firewallapi",
"firmwares",
"Friendlyname",
"gpgsign",
"gpresult",
"Harddisk",
"Hashtable",
"hashtables",
"Hiber",
"HIPPA",
"HITRUST",
"HKEY",
"HKLM",
"hotcakex",
"hotspot",
"HVCI",
"HVCIMAT",
"Hwkb",
"icontains",
"ICONURI",
"Intune",
"IOAV",
"IOMMUs",
"IRGC",
"keyprotectors",
"keyprotectortype",
"Kleopatra",
"laggy",
"Lanman",
"LGPO",
"LICENSEURI",
"LLMNR",
"LMHOSTS",
"lockstatus",
"logfiles",
"lsass",
"Mastadon",
"MDAG",
"MDAV",
"mechatroner",
"Miracast",
"Mitigations",
"mountpoint",
"mountvol",
"msinfo",
"MSIX",
"multicloud",
"Multifactor",
"multiplatform",
"Netbios",
"nobanner",
"notcontains",
"ntdll",
"NTFS",
"OFAC",
"operatingsystem",
"OPSEC",
"Optane",
"Orcid",
"orpa",
"passwordless",
"pentest",
"pentesting",
"pentests",
"Perflib",
"photoshop",
"PKCS",
"Podāns's",
"privatefirewall",
"privs",
"PROJECTURI",
"pschildname",
"PSHOME",
"psscriptroot",
"publicfirewall",
"pwsh",
"Readline",
"rebootlessly",
"RELEASENOTES",
"reparse",
"Requiredbuild",
"REQUIREDSCRIPTS",
"Rockstar",
"sandboxed",
"Schannel",
"SCHTASKS",
"scriptblock",
"scriptblocks",
"Secureboot",
"securestring",
"Shellv",
"SIEM",
"sigcheck",
"Signingkey",
"signtool",
"Sponsorsof",
"Spynet",
"ssllabs",
"SSTP",
"Stackexchange",
"Stonks",
"subfolders",
"subpaths",
"svchost",
"Sysmon",
"systemroot",
"taskkill",
"Tmpl",
"tolower",
"tpmenabled",
"Tpmpin",
"tpmpresent",
"UEFI",
"uksouth",
"UMCI",
"Unprotect",
"Uplay",
"USERPROFILE",
"Vadims",
"VBSCRIPT",
"VHDX",
"vnet",
"Wayback",
"WDAC",
"webmail",
"webserver",
"WHQL",
"Winget",
"Winreg",
"Wireshark",
"Wireshark's",
"WTDS",
"XDRs",
"Zune"
]
},
"extensions": {
"recommendations": [
"ms-vscode.powershell",
"mechatroner.rainbow-csv",
"streetsidesoftware.code-spell-checker"
]
},
"launch": {
"version": "0.2.0",
"configurations": [
{
"name": "Debug",
"request": "launch",
"type": "PowerShell",
"script": "${workspaceFolder}/Utilities/Invoke-Harden-Windows-Security.ps1"
}
]
}
}
Loading