Where can I find and guides to harden my Windows 10 around here?

[RXZ6Q]

The questions is simple. Although I tried, I can't seem to find any comprehensive guide that would include a tutorial about how to lock down Windows 10 as much as possible (such as disabling execution of script files, disabling auto-run, disabling remote desktop and other unnecessary and potentionally dangerous Windows services, etc..., etc...).

Is there anything like this on this great forum ?

I also found a lot of weird settings in the so called Windows Defender Security Center. Such as core isolation:

https://support.microsoft.com/en-us...rotection-in-windows-defender-security-center

And I have no idea how should I tweak those setting... Anyone here feels the same?

 

[HarborFront]

Get it here if you want to harden Windows 10

Harden Windows 10 for Security. How to secure Windows 10.

 

[oldschool]

If you want an easy way to disable scripts, etc., try here: Update - Hard_Configurator - Windows Hardening Configurator

Hard Configurator is simple to use and most excellent!

Or, if you wish to do privacy hardening, try here: Windows 10 Debotnet Guide

In regards to link in your OP, you must have W10 Pro, I believe, for those features.

 

[vtqhtr413]

Andy Ful configuration tools; https; AndyFul - Overview

NoVirusThanks configuration tools; Harden Windows Settings with SysHardener | NoVirusThanks

 

[RXZ6Q]

Get it here if you want to harden Windows 10

Harden Windows 10 for Security. How to secure Windows 10.

While this is still rather an useful article, I can't seem to find any info regarding the new Windows "core isolation" and other stuff implemented in their brand new Windows Defender Security Center.

 

[HarborFront]

While this is still rather an useful article, I can't seem to find any info regarding the new Windows "core isolation" and other stuff implemented in their brand new Windows Defender Security Center.

What Are “Core Isolation” and “Memory Integrity” in Windows 10?

Beginner's guide to Windows Defender Security Center on Windows 10

https://www.winhelp.us/configure-windows-defender-security-center.html

Understand the above and you'll know how to set

 

[DeepWeb]

EUD Guidance: Windows 10 (1803) with Mobile Device Management - NCSC Site
Penetration Testers’ Guide to Windows 10 Privacy & Security

 

[Sunshine-boy]

if you are sick you need to remove unnecessary windows components with Download NTLite 1.7.2.6680 / 1.8.0.6680 Beta and apply all these tweaks:
This Windows 10 Setup Script turns off a bunch of unnecessary Windows 10 telemetery, bloatware, & privacy things. Not guaranteed to catch everything. Review and tweak before running. Reboot after running. Scripts for reversing are included and commented. Fork of https://github.com/Disassembler0/Win10-Initial-Setup-Script (different defaults). N.B. for a more secure baseline, refer to https://github.com/nsacyber/Windows-Secure-Host-Baseline
https://acsc.gov.au/publications/protect/Hardening_Win10.pdf
Harden Windows 10 for Security. How to secure Windows 10.

 

[oldschool]

Debotnet check the total virus and Free automated malware analysis service: developed by Falcon Sandbox, contains malware and breaks windows

I checked this one Windows 10 Privacy Guide - May 2019 Update on VT too, only two out of how many engines?. Anyway, this guy switched to Linux and no longer maintains or updates the guide. In fact, he was looking for someone to take over maintenance and probably never found anyone.