Automating Security and Hardening: Comprehensive Hardening Resources

Awesome Hardening

A collection of scripts and configurations for hardening various systems and applications.

Windows Hardening #

• Windows Optimize Harden Debloat - Script for optimizing and hardening Windows systems.
• Windows Optimize Harden Debloat GUI - GUI version of Windows Optimize Harden Debloat script.
• Windows Defender Hardening - Script for hardening Windows Defender.
• Windows Defender Application Control Hardening - Script for hardening Windows Defender Application Control.
• Windows Terminal Hardening - Script for hardening Windows Terminal.
• Applocker Hardening - Script for hardening Applocker.
• Windows Hardening CTF - Basic hardening designed not to break anything so it can be deployed in any environment. Focused at CTF event boxes.
• Windows Defender Application Guard Hardening - Script for hardening Windows Defender Application Guard.
• Windows STIG Ansible Playbooks - Ansible playbooks for STIG-compliant Windows systems.
• Windows Defender STIG Script - Script for STIG-compliant Windows Defender.
• Standalone Windows Server STIG Script - Standalone script for STIG-compliant Windows Server.
• Standalone Windows STIG Script - Standalone script for STIG-compliant Windows systems.
• STIG Compliant Domain Prep - Script to import STIG compliant GPOs into a domain controller for use in a windows domain environment.

Web Server Hardening #

• Apache Web Server Hardening - Scripts and documentation for hardening Apache Web Server.

Application Hardening #

• .NET STIG Script - Script for STIG-compliant .NET applications.
• Adobe Reader DC STIG Script - Script for STIG-compliant Adobe Reader DC.
• Oracle JRE 8 STIG Script - Script for STIG-compliant Oracle JRE 8.
• FireFox STIG Script - Script for STIG-compliant FireFox.

Contributing #

We welcome contributions to this repository! If you have a bugfix, improvement, or new feature, feel free to submit a pull request.