41 recommendations. Filter by category, criticality, maturity tier, or system.
Reduce the Exchange Online attack surface by blocking Exchange Web Services (EWS) when it is not required and migrate legitimate application dependencies to Microsoft Graph.
Protect privileged administrator accounts from credential phishing and MFA bypass attacks by requiring phishing-resistant authentication methods such as FIDO2 security keys, passkeys, Windows Hello for Business, or certificate-based authentication.
Enable SMB signing to verify the integrity of SMB traffic and reduce the risk of man-in-the-middle attacks against Windows file sharing.
Block legacy authentication protocols that bypass modern security controls such as MFA and Conditional Access to reduce the risk of credential attacks.
Reduce the risk of the PrintNightmare vulnerability by securing the Windows Print Spooler service, applying security updates, and restricting printer driver installation to trusted administrators.
Disable NetBIOS name resolution to reduce legacy attack surfaces, prevent name spoofing attacks, and encourage secure DNS-based name resolution.
Optional analytics cookies help us improve Hardenly. They stay off unless you accept. Cookie policy