gpo

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

Windows 11 secure group policy for standalone devices

Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

PowerShell scripts to automatically create rules for Windows firewall

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

Group Policy Template for Schannel

PowerShell Policy Editor

PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).

Downloadable MARC records from the U.S. Government Publishing Office.

Automated STIG Benchmark Compliance Remediation for Windows Server 2019 with Ansible

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

A repository of compiled and ready-to-use shells for Windows restricted environments.

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might want to tune the GPO edits as needed.

Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.

Fix ADMX files before uploading them to Intune

Applies DISA STIGS GPO Policy's offline

Windows Hardening Powershell Scripts

Auto-generate and auto-configure Outlook signatures for your AD/LDAP users.

Know whenever a domain user plugs in a USB storage device. Log & email when storage devices get attached to your network.