A lifetime ago I used Ashampoo and fiddled with WinTweaks. Now I'm accustomed to group policy objects and managing servers and workstations with ACLs, private keys, identity management and SCCM.
Registry tweaks for Windows OS can be found on Github, MS KB security portal, BlackViper and SpeedGuide, but please keep in mind many registry entries have been deprecated in recent versions of Windows.
For security hardening I'd recommend Device Guard with a Code Integrity Policy, assuming hardware support. Else, disabling unnecessary services and minimizing your attack surface.
For OP my suggested registry tweak is:
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
SMB1=0 (DWORD)
Of course, you can simply remove this feature using the Remove Roles and Features Wizard.