Home

Harden Windows Security GitHub Wiki content

AppControl Manager

• Create AppControl Policy
• Create Supplemental Policy
• System Information
• Configure Policy Rule Options
• Simulation
• Allow New Apps
• Build New Certificate
• Create Policy From Event Logs
• Create Policy From MDE Advanced Hunting
• Merge App Control Policies
• Deploy App Control Policy
• Get Code Integrity Hashes
• Get Secure Policy Settings
• Update

Harden Windows Security Module

App Control for Business

• Introduction
• App Control for Lightly Managed Devices
• App Control for Fully managed device - Variant 1
• App Control for Fully managed device - Variant 2
• App Control for Fully managed device - Variant 3
• App Control for Fully managed device - Variant 4
• App Control Notes
• How to Create and Deploy a Signed App Control Policy
• Fast and Automatic Microsoft Recommended Driver Block Rules updates
• App Control policy for BYOVD Kernel mode only protection
• EKUs in App Control for Business Policies
• App Control Rule Levels Comparison and Guide
• Script Enforcement and PowerShell Constrained Language Mode in App Control Policies
• How to Use Microsoft Defender for Endpoint Advanced Hunting With App Control
• App Control Frequently Asked Questions (FAQs)

WDACConfig Module Main

• New-WDACConfig
• New-SupplementalWDACConfig
• Remove-WDACConfig
• Edit-WDACConfig
• Edit-SignedWDACConfig
• Deploy-SignedWDACConfig
• Confirm-WDACConfig
• New-DenyWDACConfig
• Set-CommonWDACConfig
• New-KernelModeWDACConfig
• Get-CommonWDACConfig
• Remove-CommonWDACConfig
• Assert-WDACConfigIntegrity
• Test-CiPolicy
• Get-CiFileHashes
• Get-CIPolicySetting

Miscellaneous

• Create Bootable USB flash drive with no 3rd party tools
• Event Viewer
• Group Policy
• How to compact your OS and free up extra space
• Hyper V
• Overrides for Microsoft Security Baseline
• Git GitHub Desktop and Mandatory ASLR
• Signed and Verified commits with GitHub desktop
• About TLS, DNS, Encryption and OPSEC concepts
• Things to do when clean installing Windows
• Comparison of security benchmarks
• BitLocker, TPM and Pluton | What Are They and How Do They Work
• How to Detect Changes in User and Local Machine Certificate Stores in Real Time Using PowerShell
• Cloning Personal and Enterprise Repositories Using GitHub Desktop
• Only a Small Portion of The Windows OS Security Apparatus
• Rethinking Trust: Advanced Security Measures for High‐Stakes Systems

Azure

• Clean Source principle, Azure and Privileged Access Workstations
• How to Securely Connect to Azure VMs and Use RDP

PowerShell

• Basic PowerShell tricks and notes
• Basic PowerShell tricks and notes Part 2
• Basic PowerShell tricks and notes Part 3
• Basic PowerShell tricks and notes Part 4
• Basic PowerShell tricks and notes Part 5
• How To Access All Stream Outputs From Thread Jobs In PowerShell In Real Time
• PowerShell Best Practices To Follow When Coding
• How To Asynchronously Access All Stream Outputs From Background Jobs In PowerShell
• Powershell Dynamic Parameters and How to Add Them to the Get‐Help Syntax
• RunSpaces In PowerShell
• How To Use Reflection And Prevent Using Internal & Private C# Methods in PowerShell

Microsoft Cloud

• Microsoft Graph Explorer and API Basics

C#

• C# Tips And Tricks Part 1