Home

Harden Windows Security GitHub Wiki content

WDACConfig Module Main

• New-WDACConfig
• New-SupplementalWDACConfig
• Remove-WDACConfig
• Edit-WDACConfig
• Edit-SignedWDACConfig
• Deploy-SignedWDACConfig
• Confirm-WDACConfig
• New-DenyWDACConfig
• Set-CommonWDACConfig
• New-KernelModeWDACConfig
• Get-CommonWDACConfig
• Invoke-WDACSimulation
• Remove-CommonWDACConfig
• Assert-WDACConfigIntegrity
• Build-WDACCertificate
• Test-CiPolicy
• Get-CiFileHashes
• ConvertTo-WDACPolicy
• Get-CIPolicySetting

AppControl Manager

Harden‐Windows‐Security‐Module

App Control for Business

• Introduction
• App Control for Lightly Managed Devices
• App Control for Fully managed device - Variant 1
• App Control for Fully managed device - Variant 2
• App Control for Fully managed device - Variant 3
• App Control for Fully managed device - Variant 4
• App Control Notes
• How to Create and Deploy a Signed App Control Policy
• Fast and Automatic Microsoft Recommended Driver Block Rules updates
• App Control policy for BYOVD Kernel mode only protection
• EKUs in App Control for Business Policies
• App Control Rule Levels Comparison and Guide
• Script Enforcement and PowerShell Constrained Language Mode in App Control Policies
• How to Use Microsoft Defender for Endpoint Advanced Hunting With App Control
• App Control Frequently Asked Questions (FAQs)

Miscellaneous

• Create Bootable USB flash drive with no 3rd party tools
• Event Viewer
• Group Policy
• How to compact your OS and free up extra space
• Hyper V
• Overrides for Microsoft Security Baseline
• Git GitHub Desktop and Mandatory ASLR
• Signed and Verified commits with GitHub desktop
• About TLS, DNS, Encryption and OPSEC concepts
• Things to do when clean installing Windows
• Comparison of security benchmarks
• BitLocker, TPM and Pluton | What Are They and How Do They Work
• How to Detect Changes in User and Local Machine Certificate Stores in Real Time Using PowerShell
• Cloning Personal and Enterprise Repositories Using GitHub Desktop
• Only a Small Portion of The Windows OS Security Apparatus

Azure

• Clean Source principle, Azure and Privileged Access Workstations
• How to Securely Connect to Azure VMs and Use RDP

PowerShell

• Basic PowerShell tricks and notes
• Basic PowerShell tricks and notes Part 2
• Basic PowerShell tricks and notes Part 3
• Basic PowerShell tricks and notes Part 4
• Basic PowerShell tricks and notes Part 5
• How To Access All Stream Outputs From Thread Jobs In PowerShell In Real Time
• PowerShell Best Practices To Follow When Coding
• How To Asynchronously Access All Stream Outputs From Background Jobs In PowerShell
• Powershell Dynamic Parameters and How to Add Them to the Get‐Help Syntax
• RunSpaces In PowerShell
• How To Use Reflection And Prevent Using Internal & Private C# Methods in PowerShell

Microsoft Cloud

• Microsoft Graph Explorer and API Basics

C#

• C# Tips And Tricks Part 1