gpo

Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

Windows 11 secure group policy for standalone devices

gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory environment.

PowerShell scripts to automatically create rules for Windows firewall

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

Group Policy Template for Schannel

PowerShell Policy Editor

PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).

Downloadable MARC records from the U.S. Government Publishing Office.

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

Automated STIG Benchmark Compliance Remediation for Windows Server 2019 with Ansible

A repository of compiled and ready-to-use shells for Windows restricted environments.

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might want to tune the GPO edits as needed.

Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.

🛡️ Assign AD permissions via PowerShell templates — Simplify and standardize AD delegation with reusable PowerShell templates.

Fix ADMX files before uploading them to Intune

Windows Hardening Powershell Scripts

Applies DISA STIGS GPO Policy's offline