Windows Hardening

Secure Windows Server and Windows 11 with step-by-step hardening checklists, security baselines, GPO settings, and best practices.

15 items 1 followers Last item added Jul 6, 2026

Get notified when new items are published

Block Office macro abuse, script-based attacks, and credential stealing from LSASS with Defender's built-in ASR rules — free with Windows.

Updated Jul 9, 2026Microsoft Windows 10/11 · Microsoft Windows Server · Microsoft Defender

Block unauthorized executables, scripts, and installers by allowlisting trusted applications with AppLocker or Windows Defender Application Control.

Updated Jul 9, 2026Microsoft Windows 10/11 · Microsoft Windows Server

Protect LSASS from memory dumping and credential theft attacks like Mimikatz by enforcing LSA Protection (RunAsPPL) and Credential Guard.

Updated Jul 9, 2026Microsoft Windows Server · Microsoft Windows 10/11