Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

Windows 11 secure group policy for standalone devices

PowerShell scripts to automatically create rules for Windows firewall

Disconnected GPO Editor - A Group Policy Manager launcher to allow editing of domain GPOs from non-domain joined machines

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

Group Policy Template for Schannel

PowerShell Policy Editor

PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).

Downloadable MARC records from the U.S. Government Publishing Office.

A repository of compiled and ready-to-use shells for Windows restricted environments.

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.

This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might want to tune the GPO edits as needed.

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

Applies DISA STIGS GPO Policy's offline

PowerShell module to assist with Group Policy

Know whenever a domain user plugs in a USB storage device. Log & email when storage devices get attached to your network.

Auto-generate and auto-configure Outlook signatures for your AD/LDAP users.

Fix ADMX files before uploading them to Intune

🎯 Powershell scripts for Windows Server