simeononsecurity/Standalone-Windows-Server-STIG-Script

Stars
59
Rank 509,601 (Top 11 %)
Language
PowerShell
License
MIT License
Created about 4 years ago
Updated 4 months ago

simeononsecurity/Standalone-Windows-Server-STIG-Script

simeononsecurity

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Enhance the security and compliance of your standalone Windows servers with our STIG script, specifically designed to meet DoD STIG/SRG requirements and NSACyber guidance. Achieve ultimate Windows Server protection with our easy-to-use script.

Windows-Optimize-Harden-Debloat

Enhance the security and privacy of your Windows 10 and Windows 11 deployments with our fully optimized, hardened, and debloated script. Adhere to industry best practices and Department of Defense STIG/SRG requirements for optimal performance and security.

Windows-Optimize-Debloat

Optimize and debloat Windows 10 and Windows 11 deployments according to best practices for maximum performance and privacy. The ultimate script for enhancing your Windows experience.

FireFox-Privacy-Script

Implement the privacy oriented configurations for FireFox

Standalone-Windows-STIG-Script

Create a compliant and secure Windows 10/11 system with our Gold Master image creation tool. Adhere to DoD STIG/SRG Requirements and NSA Cybersecurity guidance for standalone Windows systems with ease, using our ultimate STIG script.

Blue-Team-Tools

A collection of scripts, tools. and configs for various OS'es and applications, all free and or open-source, to assist in impromptu Blue-Team defense under an active threat.

Windows-Defender-Hardening

Take advantage of some more advanced Windows Defender settings.

Windows-Optimize-Harden-Debloat-GUI

C# Based GUI for Windows-Optimize-Harden-Debloat

System-Wide-Windows-Ad-Blocker

Block Ads, Tracking, and Telemetry System Wide

Windows-Defender-Application-Control-Hardening

Harden Windows with Windows Defender Application Control (WDAC)

STIG-Compliant-Domain-Prep

Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.

Shodan_PS

A collection of PowerShell modules for interacting with the Shodan API. Includes modules for returning information about the API, client IP, DNS, exploits, honeypot scores, hosts, ports, profiles, and scans. Shodan API key required. Query and scan credits used.

Applocker-Hardening

Ultimate Applocker Hardening Configuration Script.

setup-scripts

Set up scripts for various OS'es

Windows-Hardening-CTF

A windows hardening script that makes it difficult to compromise a Windows device. Only for use during Blue-Team Competitions.

Windows-Defender-STIG-Script

Automate Windows Defender STIG to 100% Compliance

awesome-hardening

A collection of scripts and configurations for hardening various systems and applications.

Automate-Sysmon

Automate Sysmon Deployment and Configuration

Windows_STIG_Ansible

Ansible Playbooks for SimeonOnSecurity's STIG Scripts

FireFox-Security-Researcher

Configure FireFox with Security and Intelligance features for OSINT and Security Investigations.

SAPS

A collection of scripts to assist System Adminsitrators

FireFox-STIG-Script

STIG FireFox the Easy Way

VirusTotal-PS

PowerShell Modules for Interacting with the VirusTotal API

Windows-Branding-Script

A simple script to assist with configuring branding on Windows 10 and Windows Server 2016/2019

.NET-STIG-Script

The only script to assist administrators in completing the .NET STIG.

Windows-Terminal-Hardening

Scripts and Documentation for Hardening Windows Command Prompt and PowerShell

discord-backdoors-and-breaches

A Discord Bot for Backdoors and Breaches. Pre-Alpha State Is Not Fully Functional

ChocoAutomateWindowsUpdates

Automate Windows Updates with Chocolatey and PSWindowsUpdates

docker-duino-coin

Dockerized Duino-Coin Miner

KMS-Auto-PS

Install GLVKs for Windows Desktop, Windows Server, and Office

Apache-Web-Server-Hardening

An collection of example configurations and scripts to aid administrators in configuring a hardened Apache Web Server

awesome-stigs

A collection of tested automations for implementing DoD STIGs and SRGs

docker-rtklib-onocoy-rtkdirect

Docker Container that Takes in USB or TCP Based Serial GPS Receiver Output and Forwards the Data to Either Onocoy or RTKDirect or Both.

simeononsecurity

LazyWindowsUpdates

Easily accomplish updating all windows machines in a domain

WMI-Filters

A Collection of WMI Filters

Offine-PS-ActiveDirectory-Install

Install the PowerShell RSAT ActiveDirectory Module Offline

docker-ubuntu-hardened

Hardened Docker Container with arm, arm64, and amd64 support https://simeononsecurity.com

docker-pharos-control

Dockerized TP-Link Pharos Centralized Managment Platform https://simeononsecurity.com

docker-ffmpeg-mp4-folder

Stream From a Folder of MP4 Files to Twitch, YouTube, and/or Kick

Windows-Audit-Policy

Max out Windows Auditing

ansible_linux_update

This Ansible role automates Linux security patching by applying updates to supported Linux distributions. It handles various package managers such as apt, dnf, yum, and apk to ensure that Linux systems are kept up to date with the latest security patches.

docker-debian-hardened

Hardened Debian Docker Container with arm, arm64, and amd64 support https://simeononsecurity.com

Windows-Defender-Application-Guard-Hardening

Implement WDAG and Harden Windows Based OS'es

SoS-Parrot_OS-Setup

Setup ParrotOS how I like it.

simeononsecurity.ch

The source code for the SimeonOnSecurity website

BraveADMX

Proper ADMX Templates for the Brave Browser

ntripserver

Ntrip Version 2.0 Command Line Server - Fork of ntripserver at https://software.rtcm-ntrip.org/browser/ntrip/trunk/ntripserver

SoS-Parrot-Docker

A Customized ParrotOS Docker Image https://simeononsecurity.com

AnonUpload

A PowerShell Module to Upload to anonfiles.com

Oracle-JRE-8-STIG-Script

Apply the JAVA STIG to a Windows System.

SolarWinds-SunBurst-SolarFlare-SolarMarker-Countermeasures

SolarWinds SunBurst Countermeasures

ansible_shodan

A collection of shodan modules for ansible

Windows-Spectre-Meltdown-Mitigation-Script

Simple script to implement protections against speculative execution side-channel vulnerabilities in Windows systems.

docker-mesonnetwork

Dockerized Meson Network Node https://simeononsecurity.com

glotta

Translate Hugo markdown file content and create index bundles

WMISupport

Scrap code testing C# skills for interacting with WMI via CIMSessions

Adobe-Reader-DC-STIG-Script

Fully implement the Adobe Reader DC STIG

docker-rocky-hardened

Prehardenend Rocky Linux Docker Container with arm64 and amd64 support https://simeononsecurity.com

rocky-ansible

Dockerized Ansible Controller running on Rockylinux 8 https://simeononsecurity.com

docker-rss-display-web

A docker container that publishes an rss feed to a generated webpage

track-openroaming-passpoint

A collection of scripts and tools that tracks the availability of hotspot 2.0, passpoint, and openroaming networks in the wild from the Wigle Dataset. Updates every 24 hours.

ansible_windows_update

This Ansible role automates the process of applying Windows security updates. It utilizes the `ansible.windows.win_updates` module to search for available security updates and install them on Windows hosts. By automating the patching process, you can ensure that your Windows systems stay up-to-date with the latest security patches.

ansible_system_update

This Ansible role automates the patching of both Linux and Windows systems, allowing you to keep your infrastructure up-to-date with the latest security updates.

CVE-2020-1350-Fix

A registry-based workaround can be used to help protect an affected Windows server, and it can be implemented without requiring an administrator to restart the server. Because of the volatility of this vulnerability, administrators may have to implement the workaround before they apply the security update in order to enable them to update their systems by using a standard deployment cadence.

docker-ubuntu-apache

https://simeononsecurity.com

docker-kaspapool

sos-landing-page

A static landing page for the purposes of backlinks generation.

linux-hostapd-hs20-dhcpd

Scripts and a Docker Container for Hotspot 2.0 Supported AP in Linux

docker-hs20server

A Full HS20 OSU Server Setup in Docker using hostapd, HS20-Server, Radius, sqllite3, and apache

shodanpy

A Series of Python Modules for Interacting with the Shodan API

simeononsecurity.com-comments

Just here to use as a serverless comment host for simeononsecurity.ch

ChromiumADMX

Proper ADMX Template for the Chromium Browser

scratchpad

Notes and tidbits

Chocolatey-Nethor

https://simeononsecurity.ch

docker-rhel-hardened

Prehardenend RHEL Docker Container with arm64 and amd64 support https://simeononsecurity.com

chocolateypackages

All the chocolatey packages that I maintain https://simeononsecurity.com

WeatherXM-Python

A Script That Interfaces with WeatherXM API and Pulls Weather Information from Your Weather XM Devices

docker-tor-bridge

Quickly Spin up a Tor Node https://simeononsecurity.com/github/docker-tor-bridge

sosfirefox

Search the SimeonOnSecurity Website Natively In Firefox - https://simeononsecurity.com

track-helium-mobile-wifi

A collection of scripts and tools that tracks the availability of helium mobile wifi networks in the wild from the Wigle Dataset. Updates every 24 hours.