Hardentools simply reduces the attack surface on Microsoft Windows computers by disabling low-hanging fruit risky features.
The main features of securitywithoutborders/hardentools are: Blue Team Tools, Endpoint Security, System Hardening, System Hardening Utilities.
Open-source alternatives to securitywithoutborders/hardentools include: hotcakex/harden-windows-security — Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the… orange-cyberdefense/goad — GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of… 3lp4tr0n/beaconhunter — Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to… alichtman/stronghold — Easily configure macOS security settings from the terminal. apr4h/cobaltstrikescan — Scan files or process memory for CobaltStrike beacons and parse their configuration. aghorler/windows-10-hardening — An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.
Harden-Windows-Security is a security hardening tool and framework designed to reduce the attack surface of the Windows operating system through policy enforcement. It provides a collection of security presets and templates to implement official hardening standards across multiple devices. The project distinguishes itself through a comprehensive execution control system, featuring a manager for Windows Application Control and a kernel protection suite. It implements strict trust models, including kernel-mode driver whitelisting, signed policy implementation on the EFI partition, and code inte
GOAD is an Ansible-based automation tool and infrastructure orchestrator used to deploy pre-configured networks of vulnerable Windows virtual machines. It serves as a security training environment for practicing Active Directory penetration testing, privilege escalation, and lateral movement across various cloud platforms and local virtualization hypervisors. The project distinguishes itself through a multi-provider infrastructure model and a system of infrastructure recipes that simulate intentional security misconfigurations. It supports the deployment of varied attack scenarios, including
Behavior based monitoring and hunting tool built in C# leveraging ETW tracing. Blue teamers can use this tool to detect and respond to potential Cobalt Strike beacons. Red teamers can use this tool to research ETW bypasses and discover new processes that behave like beacons.
An admittedly frivolous (and infrequently updated) attempt to harden Windows 10.