PowerShell_CyberHardening_Kit

What’s Included?

Security Hardening Scripts

• Configure-Firewall.ps1 – Apply strict inbound/outbound firewall policies
• Disable-GuestAccount.ps1 – Disable the Guest account
• Disable-LLMNR-WPAD.ps1 – Block LLMNR & WPAD name resolution attacks
• Disable-NetBIOS.ps1 – Remove NetBIOS over TCP/IP
• Disable-SMBv1.ps1 – Fully disable vulnerable SMBv1 protocol
• Disable-Services.ps1 – Turn off risky or unnecessary services
• Disable-ScheduledTasks.ps1 – Disable telemetry and ad-based tasks
• Disable-Telemetry.ps1 – Shut down Windows telemetry collection
• Block-Telemetry.ps1 – Enforce telemetry firewall blocks
• Restrict-RDP.ps1 – Disable or limit Remote Desktop access
• Set-StrongPasswordPolicy.ps1 – Enforce complex password requirements
• Set-WindowsUpdatePolicy.ps1 – Harden Windows Update behavior

Logging & Monitoring

• Enable-CommandLineLogging.ps1 – Enable command-line logging
• Enable-ScriptBlockLogging.ps1 – Turn on script block logging for PowerShell
• Log-USBActivity.ps1 – Monitor USB device usage
• Install-Sysmon.ps1 – Install and configure Sysmon for deep process/event auditing

Cleanup & Hardening

• Remove-Bloatware.ps1 – Remove unwanted preinstalled apps
• Registry-Lockdown.ps1 – Apply lockdown registry tweaks
• Reset-DefenderExclusions.ps1 – Clear Windows Defender exclusions
• Rename-Administrator.ps1 – Rename the default admin account

You Get:

• 20+ modular .ps1 scripts
• Individual .md README files explaining what each script does
• A complete zipped folder ready for deployment or Git tracking

Perfect For:

• Reducing attack surface area
• Securing remote/contractor laptops
• Building hardened baselines for virtual labs
• Teaching cyber hygiene and endpoint protection in real-world settings