defensive-windows-hardening

What problem does it solve?

Windows environments often face misconfigurations and risky configurations that enable privilege escalation and evasion. This skill provides a structured approach to hardening and detection guidance to reduce attack surface and improve SOC triage.

Core Features & Use Cases

• Windows hardening guidance aligned with common defensive needs (UAC bypass indicators, privilege escalation mitigations, Kerberos anomaly detection, and integrity checks).
• SOC-ready detection and triage workflows using Sigma, KQL, and event data mapping.
• Use Case: Hardening a Windows workstation and detecting Credential Guard gaps during routine security reviews.

Quick Start

Apply this skill to assess a Windows endpoint baseline and generate hardening and detection recommendations for SOC workflows.