├── .gitignore ├── ENT ├── Import-ENT-DeviceCompliancePolicies.ps1 ├── Import-ENT-DeviceConfigScript.ps1 ├── Import-ENT-DeviceConfiguration.ps1 ├── Import-ENT-DeviceConfigurationADMX.ps1 ├── JSON │ ├── DeviceCompliance │ │ ├── ENT-Compliance-ATP.json │ │ ├── ENT-Compliance-Delayed.json │ │ └── ENT-Compliance-Immediate.json │ ├── DeviceConfiguration │ │ ├── Enterprise-Config-Win10-Custom-CSP_17-11-2020-17-00-43.json │ │ ├── Enterprise-Config-Win10-Device-Restrictions-UI_17-11-2020-17-00-43.json │ │ ├── Enterprise-Config-Win10-Endpoint-Protection-UI_17-11-2020-17-00-43.json │ │ └── Enterprise-Config-Win10-Identity-Protection-UI_17-11-2020-17-00-43.json │ └── DeviceConfigurationADMX │ │ └── Enterprise-Edge Version 85 - Computer.json ├── MasterScript-ENT.ps1 ├── Readme.md └── Scripts │ └── ENT-DeviceConfig.ps1 ├── LICENSE ├── Legacy ├── DeviceCompliance_NCSC-Windows10(1803).ps1 ├── Enhanced-Workstation-Windows10-(1809).ps1 ├── HighSecurityWorkstation-Windows10-(1809).ps1 ├── InstallMMAforApplocker.ps1 ├── README.md └── Secure-Workstation-Windows10-(1809)-SecurityBaseline.ps1 ├── PAW ├── Import-DeviceConfigScript.ps1 ├── Import-PAW-DeviceCompliancePolicies.ps1 ├── Import-PAW-DeviceConfiguration.ps1 ├── Import-PAW-DeviceConfigurationADMX.ps1 ├── JSON │ ├── DeviceCompliance │ │ ├── PAW-Compliance-ATP.json │ │ ├── PAW-Compliance-Delayed.json │ │ └── PAW-Compliance-Immediate.json │ ├── DeviceConfiguration │ │ ├── PAW-Win10-AppLocker-Custom-CSP_25-11-2020-17-42-11.json │ │ ├── PAW-Win10-Config-Custom-CSP_25-11-2020-17-42-11.json │ │ ├── PAW-Win10-Config-Device-Restrictions-UI_25-11-2020-17-42-11.json │ │ ├── PAW-Win10-Config-Endpoint-Protection-UI_25-11-2020-17-42-12.json │ │ ├── PAW-Win10-Config-Identity-Protection-UI_25-11-2020-17-42-13.json │ │ ├── PAW-Win10-URLLockProxy-UI_25-11-2020-17-42-13.json │ │ └── PAW-Win10-Windows-Defender-Firewall-UI_29-09-2020-9-50-21.old_json │ └── DeviceConfigurationADMX │ │ └── PAW-Edge Version 85 - Computer.json ├── MasterScript PAW.ps1 ├── Readme.md └── Scripts │ └── PAW-DeviceConfig.ps1 ├── README.md ├── SECURITY.md └── SPE ├── Import-SPE-DeviceCompliancePolicies.ps1 ├── Import-SPE-DeviceConfigScript.ps1 ├── Import-SPE-DeviceConfiguration.ps1 ├── Import-SPE-DeviceConfigurationADMX.ps1 ├── JSON ├── DeviceCompliance │ ├── SPE-Compliance-ATP.json │ ├── SPE-Compliance-Delayed.json │ └── SPE-Compliance-Immediate.json ├── DeviceConfiguration │ ├── Specialized-Config-Win10-Custom-CSP_30-11-2020-18-11-51.json │ ├── Specialized-Win10-AppLocker-Custom-CSP_25-11-2020-17-42-11.json │ ├── Specialized-Win10-Device-Restrictions-UI_30-11-2020-18-11-51.json │ ├── Specialized-Win10-Endpoint-Protection-UI_30-11-2020-18-11-52.json │ └── Specialized-Win10-Identity-Protection-UI_30-11-2020-18-11-53.json └── DeviceConfigurationADMX │ └── Specialized-Edge Version 85 - Computer.json ├── MasterScript-SPE.ps1 ├── Readme.md └── Scripts └── SPE-DeviceConfig.ps1 /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/.gitignore -------------------------------------------------------------------------------- /ENT/Import-ENT-DeviceCompliancePolicies.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/Import-ENT-DeviceCompliancePolicies.ps1 -------------------------------------------------------------------------------- /ENT/Import-ENT-DeviceConfigScript.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/Import-ENT-DeviceConfigScript.ps1 -------------------------------------------------------------------------------- /ENT/Import-ENT-DeviceConfiguration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/Import-ENT-DeviceConfiguration.ps1 -------------------------------------------------------------------------------- /ENT/Import-ENT-DeviceConfigurationADMX.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/Import-ENT-DeviceConfigurationADMX.ps1 -------------------------------------------------------------------------------- /ENT/JSON/DeviceCompliance/ENT-Compliance-ATP.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceCompliance/ENT-Compliance-ATP.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceCompliance/ENT-Compliance-Delayed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceCompliance/ENT-Compliance-Delayed.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceCompliance/ENT-Compliance-Immediate.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceCompliance/ENT-Compliance-Immediate.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Custom-CSP_17-11-2020-17-00-43.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Custom-CSP_17-11-2020-17-00-43.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Device-Restrictions-UI_17-11-2020-17-00-43.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Device-Restrictions-UI_17-11-2020-17-00-43.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Endpoint-Protection-UI_17-11-2020-17-00-43.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Endpoint-Protection-UI_17-11-2020-17-00-43.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Identity-Protection-UI_17-11-2020-17-00-43.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceConfiguration/Enterprise-Config-Win10-Identity-Protection-UI_17-11-2020-17-00-43.json -------------------------------------------------------------------------------- /ENT/JSON/DeviceConfigurationADMX/Enterprise-Edge Version 85 - Computer.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/JSON/DeviceConfigurationADMX/Enterprise-Edge Version 85 - Computer.json -------------------------------------------------------------------------------- /ENT/MasterScript-ENT.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/MasterScript-ENT.ps1 -------------------------------------------------------------------------------- /ENT/Readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/Readme.md -------------------------------------------------------------------------------- /ENT/Scripts/ENT-DeviceConfig.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/ENT/Scripts/ENT-DeviceConfig.ps1 -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/LICENSE -------------------------------------------------------------------------------- /Legacy/DeviceCompliance_NCSC-Windows10(1803).ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/Legacy/DeviceCompliance_NCSC-Windows10(1803).ps1 -------------------------------------------------------------------------------- /Legacy/Enhanced-Workstation-Windows10-(1809).ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/Legacy/Enhanced-Workstation-Windows10-(1809).ps1 -------------------------------------------------------------------------------- /Legacy/HighSecurityWorkstation-Windows10-(1809).ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/Legacy/HighSecurityWorkstation-Windows10-(1809).ps1 -------------------------------------------------------------------------------- /Legacy/InstallMMAforApplocker.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/Legacy/InstallMMAforApplocker.ps1 -------------------------------------------------------------------------------- /Legacy/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/Legacy/README.md -------------------------------------------------------------------------------- /Legacy/Secure-Workstation-Windows10-(1809)-SecurityBaseline.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/Legacy/Secure-Workstation-Windows10-(1809)-SecurityBaseline.ps1 -------------------------------------------------------------------------------- /PAW/Import-DeviceConfigScript.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/Import-DeviceConfigScript.ps1 -------------------------------------------------------------------------------- /PAW/Import-PAW-DeviceCompliancePolicies.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/Import-PAW-DeviceCompliancePolicies.ps1 -------------------------------------------------------------------------------- /PAW/Import-PAW-DeviceConfiguration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/Import-PAW-DeviceConfiguration.ps1 -------------------------------------------------------------------------------- /PAW/Import-PAW-DeviceConfigurationADMX.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/Import-PAW-DeviceConfigurationADMX.ps1 -------------------------------------------------------------------------------- /PAW/JSON/DeviceCompliance/PAW-Compliance-ATP.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceCompliance/PAW-Compliance-ATP.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceCompliance/PAW-Compliance-Delayed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceCompliance/PAW-Compliance-Delayed.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceCompliance/PAW-Compliance-Immediate.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceCompliance/PAW-Compliance-Immediate.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-AppLocker-Custom-CSP_25-11-2020-17-42-11.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-AppLocker-Custom-CSP_25-11-2020-17-42-11.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Custom-CSP_25-11-2020-17-42-11.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Custom-CSP_25-11-2020-17-42-11.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Device-Restrictions-UI_25-11-2020-17-42-11.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Device-Restrictions-UI_25-11-2020-17-42-11.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Endpoint-Protection-UI_25-11-2020-17-42-12.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Endpoint-Protection-UI_25-11-2020-17-42-12.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Identity-Protection-UI_25-11-2020-17-42-13.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-Config-Identity-Protection-UI_25-11-2020-17-42-13.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-URLLockProxy-UI_25-11-2020-17-42-13.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-URLLockProxy-UI_25-11-2020-17-42-13.json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfiguration/PAW-Win10-Windows-Defender-Firewall-UI_29-09-2020-9-50-21.old_json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfiguration/PAW-Win10-Windows-Defender-Firewall-UI_29-09-2020-9-50-21.old_json -------------------------------------------------------------------------------- /PAW/JSON/DeviceConfigurationADMX/PAW-Edge Version 85 - Computer.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/JSON/DeviceConfigurationADMX/PAW-Edge Version 85 - Computer.json -------------------------------------------------------------------------------- /PAW/MasterScript PAW.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/MasterScript PAW.ps1 -------------------------------------------------------------------------------- /PAW/Readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/Readme.md -------------------------------------------------------------------------------- /PAW/Scripts/PAW-DeviceConfig.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/PAW/Scripts/PAW-DeviceConfig.ps1 -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/README.md -------------------------------------------------------------------------------- /SECURITY.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SECURITY.md -------------------------------------------------------------------------------- /SPE/Import-SPE-DeviceCompliancePolicies.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/Import-SPE-DeviceCompliancePolicies.ps1 -------------------------------------------------------------------------------- /SPE/Import-SPE-DeviceConfigScript.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/Import-SPE-DeviceConfigScript.ps1 -------------------------------------------------------------------------------- /SPE/Import-SPE-DeviceConfiguration.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/Import-SPE-DeviceConfiguration.ps1 -------------------------------------------------------------------------------- /SPE/Import-SPE-DeviceConfigurationADMX.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/Import-SPE-DeviceConfigurationADMX.ps1 -------------------------------------------------------------------------------- /SPE/JSON/DeviceCompliance/SPE-Compliance-ATP.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceCompliance/SPE-Compliance-ATP.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceCompliance/SPE-Compliance-Delayed.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceCompliance/SPE-Compliance-Delayed.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceCompliance/SPE-Compliance-Immediate.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceCompliance/SPE-Compliance-Immediate.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceConfiguration/Specialized-Config-Win10-Custom-CSP_30-11-2020-18-11-51.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceConfiguration/Specialized-Config-Win10-Custom-CSP_30-11-2020-18-11-51.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceConfiguration/Specialized-Win10-AppLocker-Custom-CSP_25-11-2020-17-42-11.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceConfiguration/Specialized-Win10-AppLocker-Custom-CSP_25-11-2020-17-42-11.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceConfiguration/Specialized-Win10-Device-Restrictions-UI_30-11-2020-18-11-51.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceConfiguration/Specialized-Win10-Device-Restrictions-UI_30-11-2020-18-11-51.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceConfiguration/Specialized-Win10-Endpoint-Protection-UI_30-11-2020-18-11-52.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceConfiguration/Specialized-Win10-Endpoint-Protection-UI_30-11-2020-18-11-52.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceConfiguration/Specialized-Win10-Identity-Protection-UI_30-11-2020-18-11-53.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceConfiguration/Specialized-Win10-Identity-Protection-UI_30-11-2020-18-11-53.json -------------------------------------------------------------------------------- /SPE/JSON/DeviceConfigurationADMX/Specialized-Edge Version 85 - Computer.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/JSON/DeviceConfigurationADMX/Specialized-Edge Version 85 - Computer.json -------------------------------------------------------------------------------- /SPE/MasterScript-SPE.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/MasterScript-SPE.ps1 -------------------------------------------------------------------------------- /SPE/Readme.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/Readme.md -------------------------------------------------------------------------------- /SPE/Scripts/SPE-DeviceConfig.ps1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Azure/securedworkstation/HEAD/SPE/Scripts/SPE-DeviceConfig.ps1 --------------------------------------------------------------------------------