Windows Hardening Guide

Windows hardening reference for 007 audit and 007 threat-model.

Covers

• Defender, firewall, and patch posture
• UAC, local admin, and least-privilege controls
• RDP exposure and remote access controls
• BitLocker and disk protection basics
• PowerShell logging and audit telemetry

Use When

• Auditing Windows desktops or servers
• Reviewing remote access, patching, or local privilege exposure
• Hardening enterprise endpoints before rollout