Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.

• UpdatedFeb 23, 2025
• PowerShell

Windows 11 secure group policy for standalone devices

• UpdatedDec 5, 2023
• Batchfile

Disconnected RSAT - A method of running Group Policy Manager, Certificate Authority and Certificate Templates MMC snap-ins from non-domain joined machies

• UpdatedDec 27, 2024
• C#

PowerShell scripts to automatically create rules for Windows firewall

• UpdatedNov 5, 2024
• PowerShell

Cromos is a tool for downloading legitimate extensions of the Chrome Web Store and inject codes in the background of the application.

• UpdatedDec 13, 2017
• Python

Group Policy Template for Schannel

• UpdatedJan 19, 2023

PowerShell Policy Editor

• UpdatedOct 3, 2024
• C#

PowerShell scripts/GUI tools for the enterprise to harden Windows Defender Firewall via group policy (GPO). These can be used to enforce network level application whitelisting and strengthen the security posture of devices to defend against attacks such as software supply chain and can be used with privileged access workstations (PAW).

• UpdatedDec 3, 2021
• PowerShell

Downloadable MARC records from the U.S. Government Publishing Office.

• UpdatedSep 16, 2024
• mIRC Script

Automated STIG Benchmark Compliance Remediation for Windows Server 2019 with Ansible

• UpdatedJun 26, 2024
• YAML

A repository of compiled and ready-to-use shells for Windows restricted environments.

• UpdatedFeb 19, 2020
• C#

Repository for Software Certs for easy software blocking across corp environments, for example, using MDE IOC

• UpdatedMar 17, 2025
• Python

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

• UpdatedJan 21, 2025
• PowerShell

Import all the GPOs provided by SimeonOnSecurity to assist in making your domain compliant with all applicable STIGs and SRGs.

• UpdatedOct 18, 2024
• HTML

This script enhances endpoint logging telemetry for the purpose of advanced malware threat detection or for building detections or malware analysis. This can be used in production, however you might want to tune the GPO edits as needed.

• UpdatedFeb 10, 2025
• PowerShell

Applies DISA STIGS GPO Policy's offline

• UpdatedJul 30, 2019
• PowerShell

Fix ADMX files before uploading them to Intune

• UpdatedAug 15, 2024
• PowerShell

Windows Hardening Powershell Scripts

• UpdatedFeb 27, 2025
• PowerShell

PowerShell module to assist with Group Policy

• UpdatedJan 6, 2020
• PowerShell

Know whenever a domain user plugs in a USB storage device. Log & email when storage devices get attached to your network.

• UpdatedFeb 24, 2019
• Visual Basic