├── .github ├── CODEOWNERS ├── FUNDING.yml ├── ISSUE_TEMPLATE │ ├── config.yml │ └── Security_Measure_Suggestion.yaml ├── PULL_REQUEST_TEMPLATE.md ├── workflows │ ├── ai-moderator.yml │ └── Sync to Azure DevOps.yaml └── copilot-instructions.md ├── AppControl Manager ├── version.txt ├── eXclude │ ├── ComManager │ │ ├── .gitignore │ │ ├── ScheduledTasks │ │ │ └── ScheduledTasks.h │ │ ├── BitLocker │ │ │ ├── BitLockerDisable.h │ │ │ ├── BitLockerEnableAutoUnlock.h │ │ │ ├── BitLockerEnableKeyProtectors.h │ │ │ ├── BitLockerSuspend.h │ │ │ ├── BitLockerRemoveKeyProtector.h │ │ │ └── BitLockerEnable.h │ │ ├── ComManager.slnx │ │ ├── Globals.cpp │ │ └── Network │ │ │ └── NetConnectionProfilesManager.h │ ├── Shell │ │ ├── MyCommands.def │ │ ├── Resource.aps │ │ ├── Icons │ │ │ ├── Main.ico │ │ │ ├── GetFileHash.ico │ │ │ ├── PolicyEditor.ico │ │ │ └── ViewFileCert.ico │ │ ├── Shell.slnx │ │ └── resource.h │ ├── File Dialogs │ │ ├── NativeMethods.txt │ │ └── NativeMethods.json │ ├── PartnerCenter │ │ ├── PartnerCenter.slnx │ │ ├── Properties │ │ │ └── PublishProfiles │ │ │ │ ├── win-arm64.pubxml │ │ │ │ └── win-x64.pubxml │ │ └── PartnerCenter.csproj │ ├── dism_capabilities │ │ ├── Cargo.toml │ │ ├── .cargo │ │ │ └── config.toml │ │ └── .vscode │ │ │ └── dism_capabilities.code-workspace │ ├── DISMService │ │ ├── Properties │ │ │ └── PublishProfiles │ │ │ │ ├── win-arm64.pubxml │ │ │ │ └── win-x64.pubxml │ │ ├── Logger.cs │ │ └── DISMService.csproj │ ├── group_policy │ │ ├── Cargo.toml │ │ ├── .cargo │ │ │ └── config.toml │ │ └── .vscode │ │ │ └── group_policy.code-workspace │ ├── QuantumRelayHSS │ │ ├── Properties │ │ │ └── PublishProfiles │ │ │ │ ├── win-arm64.pubxml │ │ │ │ └── win-x64.pubxml │ │ └── Program.cs │ ├── Rust Interop Library │ │ ├── .cargo │ │ │ └── config.toml │ │ ├── Cargo.toml │ │ └── .vscode │ │ │ └── Rust Interop Library.code-workspace │ ├── ResourceValidator │ │ ├── .cargo │ │ │ └── config.toml │ │ ├── Cargo.toml │ │ └── .vscode │ │ │ └── ResourceValidator.code-workspace │ ├── exploit_mitigations │ │ ├── .vscode │ │ │ └── exploit_mitigations.code-workspace │ │ ├── Cargo.toml │ │ └── .cargo │ │ │ └── config.toml │ └── CommonCore │ │ ├── UI │ │ ├── IPageHeaderProvider.cs │ │ └── IInvisibleCrumbar.cs │ │ ├── CommonCore.shproj │ │ ├── Others │ │ ├── LogLine.cs │ │ ├── UnifiedSearchBarResult.cs │ │ └── LanguageOption.cs │ │ ├── MicrosoftGraph │ │ ├── AuthenticationContext.cs │ │ ├── IGraphAuthHost.cs │ │ ├── IntunePolicyFileItem.cs │ │ ├── QueryPayload.cs │ │ └── ConfigurationPolicyAssignmentsEnvelope.cs │ │ ├── QuantumRelay │ │ └── BinaryProtocol.cs │ │ └── Atlas.cs ├── .cargo │ └── config.toml ├── Shell │ └── Shell.dll ├── Assets │ ├── External │ │ ├── ID.png │ │ ├── WAM.png │ │ ├── XML.png │ │ ├── Bottle.png │ │ ├── Name.png │ │ ├── Vault.png │ │ ├── file.png │ │ ├── Browser.png │ │ ├── CIPIcon.png │ │ ├── Sparkle.png │ │ ├── Version.png │ │ ├── setting.png │ │ ├── HVCIOption.png │ │ ├── PolicyType.png │ │ ├── signature.png │ │ ├── BasePolicyID.png │ │ ├── PolicyIDInfo.png │ │ ├── Authentication.png │ │ ├── file.svg │ │ └── Sparkle.svg │ ├── TileImages │ │ ├── 8786.jpg │ │ ├── drop.jpg │ │ ├── 88876.jpg │ │ ├── 96584.jpg │ │ ├── ddfAM.png │ │ ├── flower.jpg │ │ ├── 1-Welcome.jpg │ │ ├── otherside.jpg │ │ └── 2-Supplemental.jpg │ ├── Audio │ │ └── TypeWriter.wav │ ├── StoreLogo.backup.png │ ├── BadgeLogo.scale-100.png │ ├── BadgeLogo.scale-125.png │ ├── BadgeLogo.scale-150.png │ ├── BadgeLogo.scale-200.png │ ├── BadgeLogo.scale-400.png │ ├── CountryFlags │ │ ├── usa-240.png │ │ ├── india-240.png │ │ ├── germany-240.png │ │ ├── greece-240.png │ │ ├── israel-240.png │ │ ├── mexico-240.png │ │ ├── poland-240.png │ │ └── saudi-arabia-240.png │ ├── LargeTile.scale-100.png │ ├── LargeTile.scale-125.png │ ├── LargeTile.scale-150.png │ ├── LargeTile.scale-200.png │ ├── LargeTile.scale-400.png │ ├── SmallTile.scale-100.png │ ├── SmallTile.scale-125.png │ ├── SmallTile.scale-150.png │ ├── SmallTile.scale-200.png │ ├── SmallTile.scale-400.png │ ├── StoreLogo.scale-100.png │ ├── StoreLogo.scale-125.png │ ├── StoreLogo.scale-150.png │ ├── StoreLogo.scale-200.png │ ├── StoreLogo.scale-400.png │ ├── SplashScreen.scale-100.png │ ├── SplashScreen.scale-125.png │ ├── SplashScreen.scale-150.png │ ├── SplashScreen.scale-200.png │ ├── SplashScreen.scale-400.png │ ├── LockScreenLogo.scale-200.png │ ├── Square44x44Logo.scale-100.png │ ├── Square44x44Logo.scale-125.png │ ├── Square44x44Logo.scale-150.png │ ├── Square44x44Logo.scale-200.png │ ├── Square44x44Logo.scale-400.png │ ├── Wide310x150Logo.scale-100.png │ ├── Wide310x150Logo.scale-125.png │ ├── Wide310x150Logo.scale-150.png │ ├── Wide310x150Logo.scale-200.png │ ├── Wide310x150Logo.scale-400.png │ ├── Square150x150Logo.scale-100.png │ ├── Square150x150Logo.scale-125.png │ ├── Square150x150Logo.scale-150.png │ ├── Square150x150Logo.scale-200.png │ ├── Square150x150Logo.scale-400.png │ ├── Square44x44Logo.targetsize-16.png │ ├── Square44x44Logo.targetsize-24.png │ ├── Square44x44Logo.targetsize-256.png │ ├── Square44x44Logo.targetsize-32.png │ ├── Square44x44Logo.targetsize-48.png │ ├── Others │ │ └── AppWithoutIconPlaceHolder.png │ ├── Square44x44Logo.altform-unplated_targetsize-16.png │ ├── Square44x44Logo.altform-unplated_targetsize-256.png │ ├── Square44x44Logo.altform-unplated_targetsize-32.png │ ├── Square44x44Logo.altform-unplated_targetsize-48.png │ ├── Square44x44Logo.targetsize-24_altform-unplated.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-16.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-24.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-256.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-32.png │ └── Square44x44Logo.altform-lightunplated_targetsize-48.png ├── CppInterop │ └── ComManager.exe ├── RustInterop │ └── rust_interop.dll ├── global.json ├── MSIXBundleDownloadURL.txt ├── exclusion.dic ├── Properties │ ├── launchSettings.json │ └── PublishProfiles │ │ └── win-x64.pubxml ├── AppControl Manager.slnx ├── nuget.config ├── ReleaseNotes.txt ├── Cargo.toml ├── CustomUIElements │ └── HomePageCarousel │ │ └── AnimatedImage.xaml ├── SiPolicyIntel │ ├── Authorization.cs │ ├── SSType.cs │ ├── SupplementalPolicySignerRule.cs │ ├── DenyRule.cs │ ├── AllowRule.cs │ ├── CustomMethods.cs │ └── UpdatePolicySignerRule.cs ├── IntelGathering │ ├── SignatureStatus.cs │ ├── EventAction.cs │ ├── FileIdentityOrigin.cs │ └── KernelUserVerdict.cs ├── Others │ ├── OpusSigner.cs │ ├── CertificateSignerCreator.cs │ ├── FilePathCreator.cs │ ├── UpdateCheckResponse.cs │ ├── CertificateDetailsCreator.cs │ └── HashCreator.cs ├── SimulationMethods │ └── SimulationOutputSource.cs ├── PolicyEditor │ ├── SignatureBasedRuleType.cs │ └── FileBasedRuleType.cs ├── WindowComponents │ ├── IAnimatedIconsManager.cs │ ├── PageTitleMap.cs │ └── Crumb.cs └── Pages │ ├── UpdatePageCustomMSIXPath.xaml.cs │ └── SystemInformation │ └── CodeIntegrityInfo.xaml.cs ├── Harden System Security ├── DISMService.exe ├── QuantumRelayHSS.exe ├── Assets │ ├── External │ │ ├── SSL.png │ │ ├── TLS.png │ │ ├── WAM.png │ │ ├── Bottle.png │ │ ├── Browser.png │ │ ├── Curve.png │ │ ├── Exclude.png │ │ ├── POLIcon.png │ │ ├── Vault.png │ │ ├── Algorithm.png │ │ ├── Provider.png │ │ ├── Management.png │ │ ├── Authentication.png │ │ ├── SecurityMeasures.png │ │ └── FirewallManagement.png │ ├── Audio │ │ └── TypeWriter.wav │ ├── StoreLogo.backup.png │ ├── TileImages │ │ ├── 334.jpg │ │ ├── UFO.jpg │ │ ├── Xbox.jpg │ │ ├── Modular.jpg │ │ ├── flower.jpg │ │ ├── 1-Welcome.jpg │ │ ├── 2-Protect.jpg │ │ ├── NeonGril.jpg │ │ ├── NeonShores.jpg │ │ ├── WinSecFeatures.png │ │ └── groupPolicyEditor.jpg │ ├── BadgeLogo.scale-100.png │ ├── BadgeLogo.scale-125.png │ ├── BadgeLogo.scale-150.png │ ├── BadgeLogo.scale-200.png │ ├── BadgeLogo.scale-400.png │ ├── CountryFlags │ │ ├── usa-240.png │ │ ├── greece-240.png │ │ ├── india-240.png │ │ ├── israel-240.png │ │ ├── mexico-240.png │ │ ├── poland-240.png │ │ ├── germany-240.png │ │ └── saudi-arabia-240.png │ ├── DeviceIntents │ │ ├── Gaming.png │ │ ├── School.png │ │ ├── Business.png │ │ ├── Development.png │ │ ├── Privileged.png │ │ └── Specialized.png │ ├── LargeTile.scale-100.png │ ├── LargeTile.scale-125.png │ ├── LargeTile.scale-150.png │ ├── LargeTile.scale-200.png │ ├── LargeTile.scale-400.png │ ├── SmallTile.scale-100.png │ ├── SmallTile.scale-125.png │ ├── SmallTile.scale-150.png │ ├── SmallTile.scale-200.png │ ├── SmallTile.scale-400.png │ ├── StoreLogo.scale-100.png │ ├── StoreLogo.scale-125.png │ ├── StoreLogo.scale-150.png │ ├── StoreLogo.scale-200.png │ ├── StoreLogo.scale-400.png │ ├── SplashScreen.scale-100.png │ ├── SplashScreen.scale-125.png │ ├── SplashScreen.scale-150.png │ ├── SplashScreen.scale-200.png │ ├── SplashScreen.scale-400.png │ ├── LockScreenLogo.scale-200.png │ ├── Square44x44Logo.scale-100.png │ ├── Square44x44Logo.scale-125.png │ ├── Square44x44Logo.scale-150.png │ ├── Square44x44Logo.scale-200.png │ ├── Square44x44Logo.scale-400.png │ ├── Wide310x150Logo.scale-100.png │ ├── Wide310x150Logo.scale-125.png │ ├── Wide310x150Logo.scale-150.png │ ├── Wide310x150Logo.scale-200.png │ ├── Wide310x150Logo.scale-400.png │ ├── Square150x150Logo.scale-100.png │ ├── Square150x150Logo.scale-125.png │ ├── Square150x150Logo.scale-150.png │ ├── Square150x150Logo.scale-200.png │ ├── Square150x150Logo.scale-400.png │ ├── ProtectionCategoriesIcons │ │ ├── CSP.png │ │ ├── TLS.png │ │ ├── UAC.png │ │ ├── ASRrules.png │ │ ├── Bitlocker.png │ │ ├── Firewall.png │ │ ├── LockScreen.png │ │ ├── Networking.png │ │ ├── NonAdmin.png │ │ ├── Certificate.png │ │ ├── DeviceGuard.png │ │ ├── EdgeBrowser.png │ │ ├── WindowsDefender.png │ │ ├── WindowsUpdate.png │ │ ├── CountryIPBlocking.png │ │ ├── OptionalFeatures.png │ │ ├── MiscellaneousCommands.png │ │ ├── Microsoft-Security-Baseline.png │ │ ├── MicrosoftBaseLinesOverrides.png │ │ └── Microsoft-365-Apps-Security-Baselines.png │ ├── Square44x44Logo.targetsize-16.png │ ├── Square44x44Logo.targetsize-24.png │ ├── Square44x44Logo.targetsize-256.png │ ├── Square44x44Logo.targetsize-32.png │ ├── Square44x44Logo.targetsize-48.png │ ├── Others │ │ └── AppWithoutIconPlaceHolder.png │ ├── Square44x44Logo.altform-unplated_targetsize-16.png │ ├── Square44x44Logo.altform-unplated_targetsize-32.png │ ├── Square44x44Logo.altform-unplated_targetsize-48.png │ ├── Square44x44Logo.targetsize-24_altform-unplated.png │ ├── Square44x44Logo.altform-unplated_targetsize-256.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-16.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-24.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-32.png │ ├── Square44x44Logo.altform-lightunplated_targetsize-48.png │ └── Square44x44Logo.altform-lightunplated_targetsize-256.png ├── CppInterop │ └── ComManager.exe ├── RustInterop │ └── rust_interop.dll ├── global.json ├── Resources │ └── Certificate │ │ └── Microsoft Root CA 2010.crt ├── exclusion.dic ├── Properties │ ├── launchSettings.json │ └── PublishProfiles │ │ └── win-x64.pubxml ├── nuget.config ├── CustomUIElements │ ├── IntentCircles.xaml │ └── HomePageCarousel │ │ └── AnimatedImage.xaml ├── Harden System Security.slnx ├── GroupPolicy │ ├── OperationType.cs │ ├── Hive.cs │ ├── PolicyAction.cs │ ├── GroupPolicyContext.cs │ ├── Source.cs │ ├── RegistryValueType.cs │ └── PolicyInputJsonContext.cs ├── Hardware │ └── GpuInformationCollection.cs ├── Protect │ ├── GroupInfoListForMUnit.cs │ ├── DefenderPlatformUpdatesChannels.cs │ └── ProtectionPresetComboBoxType.cs └── Pages │ └── Protects │ ├── Edge.xaml │ ├── TLS.xaml │ ├── UAC.xaml │ ├── LockScreen.xaml │ ├── NonAdmin.xaml │ ├── WindowsUpdate.xaml │ ├── DeviceGuard.xaml │ ├── WindowsNetworking.xaml │ └── MiscellaneousConfigs.xaml ├── .gitattributes ├── Wiki posts ├── Miscellaneous │ ├── How to compact your OS and free up extra space.md │ └── Git GitHub Desktop and Mandatory ASLR.md ├── AppControl Manager │ ├── Validate Policies.md │ └── Get Code Integrity Hashes.md └── Harden System Security │ ├── Audit Policies.md │ ├── Manage Installed Apps.md │ ├── Certificate Checking.md │ └── File Reputation.md ├── .gitignore └── LICENSE /.github/CODEOWNERS: -------------------------------------------------------------------------------- 1 | * @HotCakeX -------------------------------------------------------------------------------- /AppControl Manager/version.txt: -------------------------------------------------------------------------------- 1 | 2.0.55.0 2 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/.gitignore: -------------------------------------------------------------------------------- 1 | /ComManager 2 | -------------------------------------------------------------------------------- /AppControl Manager/.cargo/config.toml: -------------------------------------------------------------------------------- 1 | [toolchain] 2 | channel = "nightly" 3 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/MyCommands.def: -------------------------------------------------------------------------------- 1 | EXPORTS 2 | DllGetClassObject PRIVATE 3 | DllCanUnloadNow PRIVATE -------------------------------------------------------------------------------- /AppControl Manager/Shell/Shell.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Shell/Shell.dll -------------------------------------------------------------------------------- /Harden System Security/DISMService.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/DISMService.exe -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/ID.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/ID.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/WAM.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/WAM.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/XML.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/XML.png -------------------------------------------------------------------------------- /AppControl Manager/eXclude/File Dialogs/NativeMethods.txt: -------------------------------------------------------------------------------- 1 | CoCreateInstance 2 | SHCreateItemFromParsingName 3 | IFileOpenDialog 4 | FileOpenDialog 5 | -------------------------------------------------------------------------------- /Harden System Security/QuantumRelayHSS.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/QuantumRelayHSS.exe -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Bottle.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Bottle.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Name.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Name.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Vault.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Vault.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/file.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/file.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/8786.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/8786.jpg -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/drop.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/drop.jpg -------------------------------------------------------------------------------- /AppControl Manager/CppInterop/ComManager.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/CppInterop/ComManager.exe -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/Resource.aps: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/eXclude/Shell/Resource.aps -------------------------------------------------------------------------------- /AppControl Manager/Assets/Audio/TypeWriter.wav: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Audio/TypeWriter.wav -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Browser.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Browser.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/CIPIcon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/CIPIcon.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Sparkle.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Sparkle.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Version.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Version.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/setting.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/setting.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/StoreLogo.backup.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/StoreLogo.backup.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/88876.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/88876.jpg -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/96584.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/96584.jpg -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/ddfAM.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/ddfAM.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/flower.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/flower.jpg -------------------------------------------------------------------------------- /AppControl Manager/RustInterop/rust_interop.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/RustInterop/rust_interop.dll -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/Icons/Main.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/eXclude/Shell/Icons/Main.ico -------------------------------------------------------------------------------- /Harden System Security/Assets/External/SSL.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/SSL.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/TLS.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/TLS.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/WAM.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/WAM.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/BadgeLogo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/BadgeLogo.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/BadgeLogo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/BadgeLogo.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/BadgeLogo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/BadgeLogo.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/BadgeLogo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/BadgeLogo.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/BadgeLogo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/BadgeLogo.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/usa-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/usa-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/HVCIOption.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/HVCIOption.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/PolicyType.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/PolicyType.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/signature.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/signature.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/LargeTile.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/LargeTile.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/LargeTile.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/LargeTile.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/LargeTile.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/LargeTile.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/LargeTile.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/LargeTile.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/LargeTile.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/LargeTile.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SmallTile.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SmallTile.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SmallTile.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SmallTile.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SmallTile.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SmallTile.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SmallTile.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SmallTile.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SmallTile.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SmallTile.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/StoreLogo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/StoreLogo.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/StoreLogo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/StoreLogo.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/StoreLogo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/StoreLogo.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/StoreLogo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/StoreLogo.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/StoreLogo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/StoreLogo.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/1-Welcome.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/1-Welcome.jpg -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/otherside.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/otherside.jpg -------------------------------------------------------------------------------- /AppControl Manager/global.json: -------------------------------------------------------------------------------- 1 | { 2 | "sdk": { 3 | "version": "10.0.101", 4 | "rollForward": "latestMajor", 5 | "allowPrerelease": false 6 | } 7 | } -------------------------------------------------------------------------------- /Harden System Security/Assets/Audio/TypeWriter.wav: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Audio/TypeWriter.wav -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Bottle.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Bottle.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Browser.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Browser.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Curve.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Curve.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Exclude.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Exclude.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/POLIcon.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/POLIcon.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Vault.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Vault.png -------------------------------------------------------------------------------- /Harden System Security/Assets/StoreLogo.backup.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/StoreLogo.backup.png -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/334.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/334.jpg -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/UFO.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/UFO.jpg -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/Xbox.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/Xbox.jpg -------------------------------------------------------------------------------- /Harden System Security/CppInterop/ComManager.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/CppInterop/ComManager.exe -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/india-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/india-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/BasePolicyID.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/BasePolicyID.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/PolicyIDInfo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/PolicyIDInfo.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SplashScreen.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SplashScreen.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SplashScreen.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SplashScreen.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SplashScreen.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SplashScreen.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SplashScreen.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SplashScreen.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/SplashScreen.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/SplashScreen.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Algorithm.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Algorithm.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Provider.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Provider.png -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/Modular.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/Modular.jpg -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/flower.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/flower.jpg -------------------------------------------------------------------------------- /Harden System Security/RustInterop/rust_interop.dll: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/RustInterop/rust_interop.dll -------------------------------------------------------------------------------- /Harden System Security/global.json: -------------------------------------------------------------------------------- 1 | { 2 | "sdk": { 3 | "version": "10.0.101", 4 | "rollForward": "latestMajor", 5 | "allowPrerelease": false 6 | } 7 | } -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/germany-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/germany-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/greece-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/greece-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/israel-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/israel-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/mexico-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/mexico-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/poland-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/poland-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Authentication.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/External/Authentication.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/LockScreenLogo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/LockScreenLogo.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/TileImages/2-Supplemental.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/TileImages/2-Supplemental.jpg -------------------------------------------------------------------------------- /AppControl Manager/Assets/Wide310x150Logo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Wide310x150Logo.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Wide310x150Logo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Wide310x150Logo.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Wide310x150Logo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Wide310x150Logo.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Wide310x150Logo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Wide310x150Logo.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Wide310x150Logo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Wide310x150Logo.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/Icons/GetFileHash.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/eXclude/Shell/Icons/GetFileHash.ico -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/Icons/PolicyEditor.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/eXclude/Shell/Icons/PolicyEditor.ico -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/Icons/ViewFileCert.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/eXclude/Shell/Icons/ViewFileCert.ico -------------------------------------------------------------------------------- /Harden System Security/Assets/BadgeLogo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/BadgeLogo.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/BadgeLogo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/BadgeLogo.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/BadgeLogo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/BadgeLogo.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/BadgeLogo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/BadgeLogo.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/BadgeLogo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/BadgeLogo.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/usa-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/usa-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/DeviceIntents/Gaming.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/DeviceIntents/Gaming.png -------------------------------------------------------------------------------- /Harden System Security/Assets/DeviceIntents/School.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/DeviceIntents/School.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Management.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Management.png -------------------------------------------------------------------------------- /Harden System Security/Assets/LargeTile.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/LargeTile.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/LargeTile.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/LargeTile.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/LargeTile.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/LargeTile.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/LargeTile.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/LargeTile.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/LargeTile.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/LargeTile.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SmallTile.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SmallTile.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SmallTile.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SmallTile.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SmallTile.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SmallTile.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SmallTile.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SmallTile.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SmallTile.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SmallTile.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/StoreLogo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/StoreLogo.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/StoreLogo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/StoreLogo.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/StoreLogo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/StoreLogo.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/StoreLogo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/StoreLogo.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/StoreLogo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/StoreLogo.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/1-Welcome.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/1-Welcome.jpg -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/2-Protect.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/2-Protect.jpg -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/NeonGril.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/NeonGril.jpg -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/NeonShores.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/NeonShores.jpg -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square150x150Logo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square150x150Logo.scale-100.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square150x150Logo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square150x150Logo.scale-125.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square150x150Logo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square150x150Logo.scale-150.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square150x150Logo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square150x150Logo.scale-200.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square150x150Logo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square150x150Logo.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/greece-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/greece-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/india-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/india-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/israel-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/israel-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/mexico-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/mexico-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/poland-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/poland-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/DeviceIntents/Business.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/DeviceIntents/Business.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/Authentication.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/Authentication.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SplashScreen.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SplashScreen.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SplashScreen.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SplashScreen.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SplashScreen.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SplashScreen.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SplashScreen.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SplashScreen.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/SplashScreen.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/SplashScreen.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/CountryFlags/saudi-arabia-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/CountryFlags/saudi-arabia-240.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.targetsize-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.targetsize-16.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.targetsize-24.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.targetsize-24.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.targetsize-256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.targetsize-256.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.targetsize-32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.targetsize-32.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.targetsize-48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.targetsize-48.png -------------------------------------------------------------------------------- /AppControl Manager/MSIXBundleDownloadURL.txt: -------------------------------------------------------------------------------- 1 | https://github.com/HotCakeX/Harden-Windows-Security/releases/download/AppControlManager-v2.0.55.0/AppControl.Manager_2.0.55.0.msixbundle 2 | -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/germany-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/germany-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/DeviceIntents/Development.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/DeviceIntents/Development.png -------------------------------------------------------------------------------- /Harden System Security/Assets/DeviceIntents/Privileged.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/DeviceIntents/Privileged.png -------------------------------------------------------------------------------- /Harden System Security/Assets/DeviceIntents/Specialized.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/DeviceIntents/Specialized.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/SecurityMeasures.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/SecurityMeasures.png -------------------------------------------------------------------------------- /Harden System Security/Assets/LockScreenLogo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/LockScreenLogo.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/WinSecFeatures.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/WinSecFeatures.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Wide310x150Logo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Wide310x150Logo.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Wide310x150Logo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Wide310x150Logo.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Wide310x150Logo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Wide310x150Logo.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Wide310x150Logo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Wide310x150Logo.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Wide310x150Logo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Wide310x150Logo.scale-400.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Others/AppWithoutIconPlaceHolder.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Others/AppWithoutIconPlaceHolder.png -------------------------------------------------------------------------------- /Harden System Security/Assets/External/FirewallManagement.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/External/FirewallManagement.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square150x150Logo.scale-100.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square150x150Logo.scale-100.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square150x150Logo.scale-125.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square150x150Logo.scale-125.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square150x150Logo.scale-150.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square150x150Logo.scale-150.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square150x150Logo.scale-200.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square150x150Logo.scale-200.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square150x150Logo.scale-400.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square150x150Logo.scale-400.png -------------------------------------------------------------------------------- /Harden System Security/Assets/TileImages/groupPolicyEditor.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/TileImages/groupPolicyEditor.jpg -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/ScheduledTasks/ScheduledTasks.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | 3 | namespace ScheduledTasks { 4 | int RunScheduledTasksCommand(int argc, wchar_t* argv[]); 5 | } 6 | -------------------------------------------------------------------------------- /Harden System Security/Assets/CountryFlags/saudi-arabia-240.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/CountryFlags/saudi-arabia-240.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/CSP.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/CSP.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/TLS.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/TLS.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/UAC.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/UAC.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.targetsize-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.targetsize-16.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.targetsize-24.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.targetsize-24.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.targetsize-256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.targetsize-256.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.targetsize-32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.targetsize-32.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.targetsize-48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.targetsize-48.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Others/AppWithoutIconPlaceHolder.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Others/AppWithoutIconPlaceHolder.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/ASRrules.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/ASRrules.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/Bitlocker.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/Bitlocker.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/Firewall.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/Firewall.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/LockScreen.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/LockScreen.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/Networking.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/Networking.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/NonAdmin.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/NonAdmin.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/Certificate.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/Certificate.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/DeviceGuard.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/DeviceGuard.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/EdgeBrowser.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/EdgeBrowser.png -------------------------------------------------------------------------------- /Harden System Security/Resources/Certificate/Microsoft Root CA 2010.crt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Resources/Certificate/Microsoft Root CA 2010.crt -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/BitLocker/BitLockerDisable.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | 4 | namespace BitLocker { 5 | [[nodiscard]] bool DisableDrive(const wchar_t* driveLetter); 6 | } 7 | -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/WindowsDefender.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/WindowsDefender.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/WindowsUpdate.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/WindowsUpdate.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-16.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-256.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-32.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-unplated_targetsize-48.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.targetsize-24_altform-unplated.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.targetsize-24_altform-unplated.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/CountryIPBlocking.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/CountryIPBlocking.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/OptionalFeatures.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/OptionalFeatures.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-16.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-32.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-48.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.targetsize-24_altform-unplated.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.targetsize-24_altform-unplated.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-16.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-24.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-24.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-256.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-32.png -------------------------------------------------------------------------------- /AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/AppControl Manager/Assets/Square44x44Logo.altform-lightunplated_targetsize-48.png -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/BitLocker/BitLockerEnableAutoUnlock.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | 4 | namespace BitLocker { 5 | 6 | [[nodiscard]] bool EnableAutoUnlock(const wchar_t* driveLetter); 7 | } 8 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/BitLocker/BitLockerEnableKeyProtectors.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | 4 | namespace BitLocker { 5 | [[nodiscard]] bool EnableKeyProtectors(const wchar_t* driveLetter); 6 | } 7 | -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/MiscellaneousCommands.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/MiscellaneousCommands.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-unplated_targetsize-256.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-16.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-24.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-24.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-32.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-32.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-48.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-48.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/Microsoft-Security-Baseline.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/Microsoft-Security-Baseline.png -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/MicrosoftBaseLinesOverrides.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/MicrosoftBaseLinesOverrides.png -------------------------------------------------------------------------------- /Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-256.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/Square44x44Logo.altform-lightunplated_targetsize-256.png -------------------------------------------------------------------------------- /AppControl Manager/eXclude/File Dialogs/NativeMethods.json: -------------------------------------------------------------------------------- 1 | // https://microsoft.github.io/CsWin32/docs/getting-started.html 2 | { 3 | "$schema": "https://aka.ms/CsWin32.schema.json", 4 | "allowMarshaling": false, 5 | "emitSingleFile": true 6 | } -------------------------------------------------------------------------------- /AppControl Manager/exclusion.dic: -------------------------------------------------------------------------------- 1 | sipolicy 2 | Incrementer 3 | wintrust 4 | Evtx 5 | Infos 6 | schtasks 7 | dll 8 | Usermode 9 | msix 10 | yyyy 11 | msft 12 | Dmtf 13 | citool 14 | microsoft 15 | Wldp 16 | nupkg 17 | buildtools 18 | spynetgirl 19 | -------------------------------------------------------------------------------- /Harden System Security/Assets/ProtectionCategoriesIcons/Microsoft-365-Apps-Security-Baselines.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HotCakeX/Harden-Windows-Security/HEAD/Harden System Security/Assets/ProtectionCategoriesIcons/Microsoft-365-Apps-Security-Baselines.png -------------------------------------------------------------------------------- /Harden System Security/exclusion.dic: -------------------------------------------------------------------------------- 1 | sipolicy 2 | Incrementer 3 | wintrust 4 | Evtx 5 | Infos 6 | schtasks 7 | dll 8 | Usermode 9 | msix 10 | yyyy 11 | msft 12 | Dmtf 13 | citool 14 | microsoft 15 | Wldp 16 | nupkg 17 | buildtools 18 | spynetgirl 19 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/Shell.slnx: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/ComManager.slnx: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | -------------------------------------------------------------------------------- /AppControl Manager/Properties/launchSettings.json: -------------------------------------------------------------------------------- 1 | { 2 | "profiles": { 3 | "AppControl Manager (Package)": { 4 | "commandName": "MsixPackage", 5 | "nativeDebugging": true, 6 | "remoteDebugEnabled": false 7 | }, 8 | "AppControl Manager (Unpackaged)": { 9 | "commandName": "Project" 10 | } 11 | } 12 | } -------------------------------------------------------------------------------- /AppControl Manager/eXclude/PartnerCenter/PartnerCenter.slnx: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /Harden System Security/Properties/launchSettings.json: -------------------------------------------------------------------------------- 1 | { 2 | "profiles": { 3 | "Harden System Security (Package)": { 4 | "commandName": "MsixPackage", 5 | "nativeDebugging": true, 6 | "remoteDebugEnabled": false 7 | }, 8 | "Harden System Security (Unpackaged)": { 9 | "commandName": "Project" 10 | } 11 | } 12 | } -------------------------------------------------------------------------------- /.gitattributes: -------------------------------------------------------------------------------- 1 | images export-ignore 2 | *.cs text eol=crlf 3 | *.xaml text eol=crlf 4 | *.ps1 text eol=crlf 5 | *.psm1 text eol=crlf 6 | *.idl text eol=crlf 7 | *.h text eol=crlf 8 | *.cpp text eol=crlf 9 | *.sln text eol=crlf 10 | *.props text eol=crlf 11 | *.targets text eol=crlf 12 | *proj text eol=crlf 13 | *.cmd text eol=crlf 14 | *.psd1 text eol=crlf 15 | *.txt text eol=crlf 16 | *.md text eol=crlf 17 | *.xml text eol=crlf 18 | *.json text eol=crlf 19 | -------------------------------------------------------------------------------- /.github/FUNDING.yml: -------------------------------------------------------------------------------- 1 | # Bitcoin 2 | # Bitcoin Cash 3 | # Ethereum 4 | # BNB Smart Chain 5 | custom: ["https://link.trustwallet.com/send?coin=0&address=bc1qa948wr4mg2qkx2us5g8rv5ca75ppyy2ngl8k4e","https://link.trustwallet.com/send?coin=145&address=qrrj03927q90z4wg4nu2e3nf4y3qnun2ku7muv8rvm","https://link.trustwallet.com/send?coin=60&address=0xF784a3D4F9A7CC5c26d69de41D7dD6480112114D","https://link.trustwallet.com/send?coin=20000714&address=0xF784a3D4F9A7CC5c26d69de41D7dD6480112114D"] 6 | -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/file.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /AppControl Manager/AppControl Manager.slnx: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/dism_capabilities/Cargo.toml: -------------------------------------------------------------------------------- 1 | [package] 2 | name = "dism_capabilities" 3 | version = "0.1.0" 4 | edition = "2024" 5 | authors = ["Violet Hansen"] 6 | license = "MIT" 7 | homepage = "https://github.com/HotCakeX/Harden-Windows-Security" 8 | repository = "https://github.com/HotCakeX/Harden-Windows-Security" 9 | publish = false 10 | rust-version = "1.88" 11 | 12 | [dependencies] 13 | windows = { version = "*", features = [ 14 | "Win32_Foundation", 15 | "Win32_System_LibraryLoader", 16 | "Win32_System_Memory", 17 | ] } 18 | -------------------------------------------------------------------------------- /Wiki posts/Miscellaneous/How to compact your OS and free up extra space.md: -------------------------------------------------------------------------------- 1 | # Run the following commands in an elevated PowerShell 2 | 3 | To turn on CompactOS: 4 | 5 | ```powershell 6 | Compact.exe /CompactOS:always 7 | ``` 8 | 9 | To turn off CompactOS: 10 | 11 | ```powershell 12 | Compact.exe /CompactOS:never 13 | ``` 14 | 15 | To Query whether CompactOS is on or off: 16 | 17 | ```powershell 18 | Compact.exe /CompactOS:Query 19 | ``` 20 | 21 |
22 | 23 | [Source](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/compact-os?view=windows-11) 24 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/DISMService/Properties/PublishProfiles/win-arm64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | FileSystem 5 | Release 6 | arm64 7 | win-arm64 8 | true 9 | true 10 | OutputARM64\ 11 | 12 | -------------------------------------------------------------------------------- /AppControl Manager/nuget.config: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/BitLocker/BitLockerSuspend.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | 4 | namespace BitLocker { 5 | 6 | // Suspends (disables) the key protectors on a BitLocker volume. 7 | // driveLetter: Must be in the form L"C:". 8 | // rebootCount: -1 means use WMI default (omit DisableCount); otherwise 0..15 specifies how many reboots 9 | // before protection auto‑resumes. 10 | // Returns true on success, false on failure (g_lastErrorMsg set). 11 | [[nodiscard]] bool SuspendKeyProtectors(const wchar_t* driveLetter, int rebootCount /* -1 => default */); 12 | } -------------------------------------------------------------------------------- /Harden System Security/nuget.config: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/DISMService/Properties/PublishProfiles/win-x64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | FileSystem 5 | Release 6 | x64 7 | win-x64 8 | true 9 | true 10 | x86-64-v2 11 | OutputX64\ 12 | 13 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/Globals.cpp: -------------------------------------------------------------------------------- 1 | #include "Globals.h" 2 | 3 | using namespace std; 4 | 5 | wstring g_lastErrorMsg; // Default-initialized empty 6 | mutex g_errorMutex; // Default-initialized 7 | constinit bool g_skipCOMInit = false; // Remains false unless SetDllMode(true) is called 8 | 9 | // Set the global error message (thread-safe) 10 | void SetLastErrorMsg(const wstring& msg) 11 | { 12 | lock_guard lock(g_errorMutex); 13 | g_lastErrorMsg = msg; 14 | } 15 | 16 | // Clear the global error message. 17 | void ClearLastErrorMsg() 18 | { 19 | lock_guard lock(g_errorMutex); 20 | g_lastErrorMsg.clear(); 21 | } 22 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Shell/resource.h: -------------------------------------------------------------------------------- 1 | //{{NO_DEPENDENCIES}} 2 | // Microsoft Visual C++ generated include file. 3 | // Used by Resource.rc 4 | // 5 | #define IDI_ICON1 103 6 | #define IDI_ICON2 104 7 | #define IDI_ICON3 106 8 | #define IDI_ICON4 107 9 | 10 | // Next default values for new objects 11 | // 12 | #ifdef APSTUDIO_INVOKED 13 | #ifndef APSTUDIO_READONLY_SYMBOLS 14 | #define _APS_NEXT_RESOURCE_VALUE 108 15 | #define _APS_NEXT_COMMAND_VALUE 40001 16 | #define _APS_NEXT_CONTROL_VALUE 1001 17 | #define _APS_NEXT_SYMED_VALUE 101 18 | #endif 19 | #endif 20 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/group_policy/Cargo.toml: -------------------------------------------------------------------------------- 1 | [package] 2 | name = "group_policy" 3 | version = "1.0.0" 4 | edition.workspace = true 5 | authors.workspace = true 6 | license.workspace = true 7 | homepage.workspace = true 8 | repository.workspace = true 9 | publish.workspace = true 10 | rust-version.workspace = true 11 | documentation.workspace = true 12 | 13 | [[bin]] 14 | name = "group_policy" 15 | path = "src/main.rs" 16 | 17 | [dependencies] 18 | windows = { version = "*", features = [ 19 | "Win32_Foundation", 20 | "Win32_System_Com", 21 | "Win32_System_Ole", 22 | "Win32_System_Registry", 23 | "Win32_UI_Shell", 24 | "Win32_UI_Shell_Common", 25 | "Win32_System_Memory" 26 | ] } -------------------------------------------------------------------------------- /AppControl Manager/eXclude/PartnerCenter/Properties/PublishProfiles/win-arm64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | FileSystem 8 | Release 9 | arm64 10 | win-arm64 11 | true 12 | true 13 | false 14 | ARM64Output\ 15 | 16 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/group_policy/.cargo/config.toml: -------------------------------------------------------------------------------- 1 | [build] 2 | target-dir = "target" 3 | 4 | [target.x86_64-pc-windows-msvc] 5 | rustflags = [ 6 | "-Z", "ehcont-guard=true", 7 | "-C", "control-flow-guard=true", 8 | "-Z", "cf-protection=full", 9 | "-C", "target-cpu=x86-64-v2", 10 | "-C", "target-feature=+crt-static", 11 | ] 12 | 13 | [target.aarch64-pc-windows-msvc] 14 | rustflags = [ 15 | "-Z", "ehcont-guard=true", 16 | "-C", "control-flow-guard=true", 17 | "-C", "target-feature=+crt-static", 18 | ] 19 | 20 | [alias] 21 | build_x64 = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release " 22 | build_arm64 = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release" 23 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/QuantumRelayHSS/Properties/PublishProfiles/win-arm64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | FileSystem 8 | Release 9 | arm64 10 | win-arm64 11 | true 12 | true 13 | false 14 | OutputARM64\ 15 | 16 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/dism_capabilities/.cargo/config.toml: -------------------------------------------------------------------------------- 1 | [build] 2 | target-dir = "target" 3 | 4 | [target.x86_64-pc-windows-msvc] 5 | rustflags = [ 6 | "-Z", "ehcont-guard=true", 7 | "-C", "control-flow-guard=true", 8 | "-Z", "cf-protection=full", 9 | "-C", "target-cpu=x86-64-v2", 10 | "-C", "target-feature=+crt-static", 11 | ] 12 | 13 | [target.aarch64-pc-windows-msvc] 14 | rustflags = [ 15 | "-Z", "ehcont-guard=true", 16 | "-C", "control-flow-guard=true", 17 | "-C", "target-feature=+crt-static", 18 | ] 19 | 20 | [alias] 21 | build_x64 = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release" 22 | build_arm64 = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release" 23 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Rust Interop Library/.cargo/config.toml: -------------------------------------------------------------------------------- 1 | [build] 2 | target-dir = "target" 3 | 4 | [target.x86_64-pc-windows-msvc] 5 | rustflags = [ 6 | "-Z", "ehcont-guard=true", 7 | "-C", "control-flow-guard=true", 8 | "-Z", "cf-protection=full", 9 | "-C", "target-cpu=x86-64-v2", 10 | "-C", "target-feature=+crt-static", 11 | ] 12 | 13 | [target.aarch64-pc-windows-msvc] 14 | rustflags = [ 15 | "-Z", "ehcont-guard=true", 16 | "-C", "control-flow-guard=true", 17 | "-C", "target-feature=+crt-static", 18 | ] 19 | 20 | [alias] 21 | build_x64 = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release " 22 | build_arm64 = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release" 23 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Rust Interop Library/Cargo.toml: -------------------------------------------------------------------------------- 1 | [package] 2 | name = "rust_interop" 3 | version = "1.0.0" 4 | edition.workspace = true 5 | authors.workspace = true 6 | license.workspace = true 7 | homepage.workspace = true 8 | repository.workspace = true 9 | publish.workspace = true 10 | rust-version.workspace = true 11 | documentation.workspace = true 12 | 13 | [lib] 14 | name = "rust_interop" 15 | crate-type = ["staticlib", "cdylib"] 16 | 17 | [dependencies] 18 | windows = { version = "*", features = [ 19 | "Win32_Foundation", 20 | "Win32_System_Com", 21 | "Win32_UI_Shell", 22 | "Win32_UI_Shell_Common", 23 | "Win32_System_Ole", 24 | "Win32_System_Wmi", 25 | "Win32_System_Variant" 26 | ] } 27 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/config.yml: -------------------------------------------------------------------------------- 1 | blank_issues_enabled: true 2 | contact_links: 3 | - name: Questions & Discussions ✍️ 4 | url: https://github.com/HotCakeX/Harden-Windows-Security/discussions 5 | about: Please use GitHub discussions for any questions. 6 | - name: Basic FAQs 💞 7 | url: https://github.com/HotCakeX/Harden-Windows-Security/wiki/Answers-to-the-Basic-Frequently-Asked-Questions 8 | about: Answers to the Basic Frequently Asked Questions - Make sure to read them first. 9 | - name: AppControl Manager Privacy Policy 🔒 10 | url: https://github.com/HotCakeX/Harden-Windows-Security/wiki/Privacy-Policy-for-the-AppControl-Manager 11 | about: The privacy policy for the AppControl Manager is available in this link. 12 | -------------------------------------------------------------------------------- /.github/PULL_REQUEST_TEMPLATE.md: -------------------------------------------------------------------------------- 1 | 13 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ResourceValidator/.cargo/config.toml: -------------------------------------------------------------------------------- 1 | [build] 2 | target-dir = "target" 3 | 4 | [target.x86_64-pc-windows-msvc] 5 | rustflags = [ 6 | "-Z", "ehcont-guard=true", 7 | "-C", "control-flow-guard=true", 8 | "-Z", "cf-protection=full", 9 | "-C", "target-cpu=x86-64-v2", 10 | "-C", "target-feature=+crt-static", 11 | ] 12 | 13 | [target.aarch64-pc-windows-msvc] 14 | rustflags = [ 15 | "-Z", "ehcont-guard=true", 16 | "-C", "control-flow-guard=true", 17 | "-C", "target-feature=+crt-static", 18 | ] 19 | 20 | [alias] 21 | build_x64 = "build --target x86_64-pc-windows-msvc --bin ResourceValidator-X64 --verbose --release" 22 | build_arm64 = "build --target aarch64-pc-windows-msvc --bin ResourceValidator-ARM64 --verbose --release" 23 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/PartnerCenter/Properties/PublishProfiles/win-x64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | FileSystem 8 | Release 9 | x64 10 | win-x64 11 | true 12 | true 13 | x86-64-v2 14 | false 15 | X64Output\ 16 | 17 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/QuantumRelayHSS/Properties/PublishProfiles/win-x64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | FileSystem 8 | Release 9 | x64 10 | win-x64 11 | true 12 | true 13 | x86-64-v2 14 | false 15 | OutputX64\ 16 | 17 | -------------------------------------------------------------------------------- /AppControl Manager/ReleaseNotes.txt: -------------------------------------------------------------------------------- 1 | * Updated dependencies to the latest versions. 2 | 3 | * Improved the performance of incremental collection ListViews in Supplemental and Deny policy creation result pages. 4 | 5 | * Improved UI texts in the Deployment page to enhance clarity, fixes this issue: https://github.com/HotCakeX/Harden-Windows-Security/issues/958 6 | 7 | * In the MDE Advanced Hunting and Event Log Policy Creation pages, the Date filter is now always applied when it is set; That means the data will be consistently filtered based on Date when you sort the data, search through the data or reload new data, without requiring you to reapply the Date filter each time. This improves UX and addresses this issue: https://github.com/HotCakeX/Harden-Windows-Security/discussions/956 8 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ResourceValidator/Cargo.toml: -------------------------------------------------------------------------------- 1 | [package] 2 | name = "ResourceValidator" 3 | version = "1.0.0" 4 | description = "Performs thorough validation on resource files and related logics. See comments in the code for more info." 5 | edition.workspace = true 6 | authors.workspace = true 7 | license.workspace = true 8 | homepage.workspace = true 9 | repository.workspace = true 10 | publish.workspace = true 11 | rust-version.workspace = true 12 | documentation.workspace = true 13 | 14 | [dependencies] 15 | regex = "*" 16 | quick-xml = "*" 17 | anyhow = "*" 18 | 19 | [[bin]] 20 | # Binary for X64 target. 21 | name = "ResourceValidator-X64" 22 | path = "src/main.rs" 23 | 24 | [[bin]] 25 | # Binary for ARM64 target. 26 | name = "ResourceValidator-ARM64" 27 | path = "src/main.rs" 28 | -------------------------------------------------------------------------------- /AppControl Manager/Cargo.toml: -------------------------------------------------------------------------------- 1 | [workspace] 2 | members = [ 3 | "eXclude/exploit_mitigations", 4 | "eXclude/ResourceValidator", 5 | "eXclude/dism_capabilities", 6 | "eXclude/Rust Interop Library", 7 | "eXclude/group_policy"] 8 | resolver = "3" 9 | 10 | [workspace.package] 11 | edition = "2024" 12 | authors = ["Violet Hansen"] 13 | license = "MIT" 14 | homepage = "https://github.com/HotCakeX/Harden-Windows-Security" 15 | repository = "https://github.com/HotCakeX/Harden-Windows-Security" 16 | documentation = "https://github.com/HotCakeX/Harden-Windows-Security" 17 | publish = false 18 | rust-version = "1.92" 19 | 20 | [profile.release] 21 | codegen-units = 1 22 | opt-level = "s" 23 | split-debuginfo = "packed" 24 | strip = "symbols" 25 | lto = "fat" 26 | incremental = false 27 | panic = "unwind" 28 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/group_policy/.vscode/group_policy.code-workspace: -------------------------------------------------------------------------------- 1 | { 2 | "folders": [ 3 | { 4 | "path": ".." 5 | } 6 | ], 7 | "settings": { 8 | "rust-analyzer.showSyntaxTree": true, 9 | // Rust Analyzer extension does not respect the `[build] target-dir = "target"` that is specified in the `.cargo/config.toml` file in the project directory. 10 | // Using the setting below, we force it to write its files to the `target` folder in the project directory rather than the root/parent directory where global cargo configs are located. 11 | "rust-analyzer.cargo.targetDir": "${workspaceFolder}/target", 12 | }, 13 | "extensions": { 14 | "recommendations": [ 15 | "ms-vscode.cpptools", 16 | "github.copilot", 17 | "github.copilot-chat", 18 | "rust-lang.rust-analyzer" 19 | ] 20 | } 21 | } -------------------------------------------------------------------------------- /Harden System Security/CustomUIElements/IntentCircles.xaml: -------------------------------------------------------------------------------- 1 | 8 | 9 | 13 | 18 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ResourceValidator/.vscode/ResourceValidator.code-workspace: -------------------------------------------------------------------------------- 1 | { 2 | "folders": [ 3 | { 4 | "path": ".." 5 | } 6 | ], 7 | "settings": { 8 | "rust-analyzer.showSyntaxTree": true, 9 | // Rust Analyzer extension does not respect the `[build] target-dir = "target"` that is specified in the `.cargo/config.toml` file in the project directory. 10 | // Using the setting below, we force it to write its files to the `target` folder in the project directory rather than the root/parent directory where global cargo configs are located. 11 | "rust-analyzer.cargo.targetDir": "${workspaceFolder}/target", 12 | }, 13 | "extensions": { 14 | "recommendations": [ 15 | "ms-vscode.cpptools", 16 | "github.copilot", 17 | "github.copilot-chat", 18 | "rust-lang.rust-analyzer" 19 | ] 20 | } 21 | } -------------------------------------------------------------------------------- /AppControl Manager/eXclude/dism_capabilities/.vscode/dism_capabilities.code-workspace: -------------------------------------------------------------------------------- 1 | { 2 | "folders": [ 3 | { 4 | "path": ".." 5 | } 6 | ], 7 | "settings": { 8 | "rust-analyzer.showSyntaxTree": true, 9 | // Rust Analyzer extension does not respect the `[build] target-dir = "target"` that is specified in the `.cargo/config.toml` file in the project directory. 10 | // Using the setting below, we force it to write its files to the `target` folder in the project directory rather than the root/parent directory where global cargo configs are located. 11 | "rust-analyzer.cargo.targetDir": "${workspaceFolder}/target", 12 | }, 13 | "extensions": { 14 | "recommendations": [ 15 | "ms-vscode.cpptools", 16 | "github.copilot", 17 | "github.copilot-chat", 18 | "rust-lang.rust-analyzer" 19 | ] 20 | } 21 | } -------------------------------------------------------------------------------- /AppControl Manager/eXclude/exploit_mitigations/.vscode/exploit_mitigations.code-workspace: -------------------------------------------------------------------------------- 1 | { 2 | "folders": [ 3 | { 4 | "path": ".." 5 | } 6 | ], 7 | "settings": { 8 | "rust-analyzer.showSyntaxTree": true, 9 | // Rust Analyzer extension does not respect the `[build] target-dir = "target"` that is specified in the `.cargo/config.toml` file in the project directory. 10 | // Using the setting below, we force it to write its files to the `target` folder in the project directory rather than the root/parent directory where global cargo configs are located. 11 | "rust-analyzer.cargo.targetDir": "${workspaceFolder}/target", 12 | }, 13 | "extensions": { 14 | "recommendations": [ 15 | "ms-vscode.cpptools", 16 | "github.copilot", 17 | "github.copilot-chat", 18 | "rust-lang.rust-analyzer" 19 | ] 20 | } 21 | } -------------------------------------------------------------------------------- /AppControl Manager/eXclude/Rust Interop Library/.vscode/Rust Interop Library.code-workspace: -------------------------------------------------------------------------------- 1 | { 2 | "folders": [ 3 | { 4 | "path": ".." 5 | } 6 | ], 7 | "settings": { 8 | "rust-analyzer.showSyntaxTree": true, 9 | // Rust Analyzer extension does not respect the `[build] target-dir = "target"` that is specified in the `.cargo/config.toml` file in the project directory. 10 | // Using the setting below, we force it to write its files to the `target` folder in the project directory rather than the root/parent directory where global cargo configs are located. 11 | "rust-analyzer.cargo.targetDir": "${workspaceFolder}/target", 12 | }, 13 | "extensions": { 14 | "recommendations": [ 15 | "ms-vscode.cpptools", 16 | "github.copilot", 17 | "github.copilot-chat", 18 | "rust-lang.rust-analyzer" 19 | ] 20 | } 21 | } -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | # Visual Studio cache 2 | .[vV][sS]/ 3 | 4 | # .NET build outputs 5 | [bB][iI][nN]/ 6 | [oO][bB][jJ]/ 7 | 8 | # MSIX outputs (ignore these directories anywhere) 9 | [mM]SIXOutputX64/ 10 | [mM]SIXOutputARM64/ 11 | [mM]SIXBundleOutput/ 12 | 13 | # Project-specific output folders 14 | [oO]utputX64/ 15 | [oO]utputARM64/ 16 | [aA][rR][mM]64/ 17 | [xX]64/ 18 | 19 | # Generated code folders 20 | [gG]enerated Files/ 21 | 22 | # User-specific project files 23 | *.csproj.user 24 | 25 | # Rust artifacts 26 | [cC]argo.lock 27 | [tT]arget/ 28 | 29 | # Visual Studio Publish Profile user files (match anywhere) 30 | *.[pP]ubxml.[uU]ser 31 | *.vcxproj.user 32 | 33 | # .NET log files 34 | *.[bB]inlog 35 | 36 | # App Packages 37 | *.[mM][sS][iI][xX] 38 | *.[mM][sS][iI][xX][bB][uU][nN][dD][lL][eE] 39 | *.[aA][pP][pP][xX] 40 | 41 | # Temp Files 42 | *.[tT][mM][pP] 43 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/BitLocker/BitLockerRemoveKeyProtector.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | 4 | namespace BitLocker { 5 | 6 | // Removes a BitLocker key protector identified by its KeyProtectorID. 7 | // driveLetter: Must be in the form L"C:" (two characters, second is colon). 8 | // keyProtectorId: The VolumeKeyProtectorID returned by BitLocker WMI (GUID-like string). 9 | // noErrorIfBound: If true and the key protector is bound (FVE_E_VOLUME_BOUND_ALREADY), treat as success and do not set an error. 10 | // Returns true on success (including benign skip conditions such as "not found" or "unsupported type"). 11 | // Returns false on fatal errors; in that case g_lastErrorMsg is set. 12 | [[nodiscard]] bool RemoveKeyProtector(const wchar_t* driveLetter, const wchar_t* keyProtectorId, bool noErrorIfBound); 13 | 14 | } 15 | -------------------------------------------------------------------------------- /AppControl Manager/CustomUIElements/HomePageCarousel/AnimatedImage.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 16 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /Harden System Security/CustomUIElements/HomePageCarousel/AnimatedImage.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 16 | 20 | 21 | 22 | -------------------------------------------------------------------------------- /Harden System Security/Harden System Security.slnx: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | -------------------------------------------------------------------------------- /Wiki posts/AppControl Manager/Validate Policies.md: -------------------------------------------------------------------------------- 1 | # Validate Policies 2 | 3 |
4 | 5 | AppControl Manager Application's Validate Policies Page 6 | 7 |
8 | 9 |
10 | 11 |
12 | 13 | Use this [AppControl Manager](https://github.com/HotCakeX/Harden-Windows-Security/wiki/AppControl-Manager) page to validate AppControl Manager XML files against the official schema that is located in `C:\Windows\schemas\CodeIntegrity\cipolicy.xsd`. 14 | 15 | If you manually modified some parts of an App Control policy, this is a great way to ensure your modifications are valid. If the policy is not valid, you will see an error message that will help you understand what is wrong with the policy so you can fix it. 16 | 17 |
18 | -------------------------------------------------------------------------------- /Wiki posts/Harden System Security/Audit Policies.md: -------------------------------------------------------------------------------- 1 | # Audit Policies 2 | 3 |
4 | 5 | Audit Policies page demo of the Harden System Security App 6 | 7 |
8 | 9 |
10 | 11 | Use this page in the [Harden System Security App](https://github.com/HotCakeX/Harden-Windows-Security/wiki/Harden-System-Security) to retrieve every audit policy on the system. You can search, sort, and modify each policy's state individually. 12 | 13 | You can **export** all Audit Policies from a system to a file after retrieving them. Additionally, you can **import** this file back into the app to automatically apply the same policies on another system. This allows you to create a custom Audit Policies template once and effortlessly **re-use it across multiple systems** using the Harden System Security app. 14 | 15 |
16 | -------------------------------------------------------------------------------- /.github/workflows/ai-moderator.yml: -------------------------------------------------------------------------------- 1 | name: AI Moderator 2 | on: 3 | issues: 4 | types: [opened] 5 | issue_comment: 6 | types: [created] 7 | pull_request_review_comment: 8 | types: [created] 9 | workflow_dispatch: 10 | 11 | jobs: 12 | spam-detection: 13 | runs-on: ubuntu-latest 14 | permissions: 15 | issues: write 16 | pull-requests: write 17 | models: read 18 | contents: read 19 | steps: 20 | - uses: actions/checkout@v6 21 | - uses: github/ai-moderator@v1 22 | with: 23 | token: ${{ secrets.GITHUB_TOKEN }} 24 | spam-label: 'spam 🚨' 25 | ai-label: 'ai-generated 🎭' 26 | minimize-detected-comments: true 27 | # Built-in prompt configuration (all enabled by default) 28 | enable-spam-detection: true 29 | enable-link-spam-detection: true 30 | enable-ai-detection: true 31 | # custom-prompt-path: '.github/prompts/my-custom.prompt.yml' # Optional 32 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/BitLocker/BitLockerEnable.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | #include "BitLockerManager.h" 4 | #include "BitLockerEnableKeyProtectors.h" 5 | #include "BitLockerEnableAutoUnlock.h" 6 | #include "BitLockerRemoveKeyProtector.h" 7 | #include "..\ComHelpers.h" 8 | 9 | namespace BitLocker { 10 | 11 | // Encryption types of the OS Drive supported by the Harden System Security App 12 | enum class OSEncryptionType : unsigned long 13 | { 14 | Normal = 0, 15 | Enhanced = 1 16 | }; 17 | 18 | [[nodiscard]] bool EnableOsDrive(const wchar_t* driveLetter, 19 | OSEncryptionType type, 20 | const wchar_t* pin, 21 | const wchar_t* startupKeyPath, 22 | bool freePlusUsedSpace, 23 | bool allowDowngradeEnhancedToNormal); 24 | 25 | [[nodiscard]] bool EnableFixedDrive(const wchar_t* driveLetter, bool freePlusUsedSpace); 26 | 27 | [[nodiscard]] bool EnableRemovableDrive(const wchar_t* driveLetter, const wchar_t* password, bool freePlusUsedSpace); 28 | } 29 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/Authorization.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.SiPolicyIntel; 19 | 20 | internal enum Authorization 21 | { 22 | Allow, 23 | Deny 24 | } 25 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/OperationType.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.GroupPolicy; 19 | 20 | internal enum OperationType 21 | { 22 | Added, 23 | Replaced 24 | } 25 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/Hive.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.GroupPolicy; 19 | 20 | internal enum Hive : uint 21 | { 22 | HKLM = 0, 23 | HKCU = 1, 24 | HKCR = 2 25 | } 26 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/PolicyAction.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.GroupPolicy; 19 | 20 | internal enum PolicyAction : uint 21 | { 22 | Apply = 0, 23 | Remove = 1 24 | } 25 | -------------------------------------------------------------------------------- /AppControl Manager/IntelGathering/SignatureStatus.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.IntelGathering; 19 | 20 | internal enum SignatureStatus : int 21 | { 22 | IsSigned = 0, 23 | IsUnsigned 24 | } 25 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/exploit_mitigations/Cargo.toml: -------------------------------------------------------------------------------- 1 | [package] 2 | name = "exploit_mitigations" 3 | version = "1.0.0" 4 | edition.workspace = true 5 | authors.workspace = true 6 | license.workspace = true 7 | homepage.workspace = true 8 | repository.workspace = true 9 | publish.workspace = true 10 | rust-version.workspace = true 11 | 12 | [lib] 13 | name = "exploit_mitigations_lib" 14 | crate-type = ["cdylib", "rlib"] 15 | 16 | [[bin]] 17 | name = "exploit_mitigations_bin" 18 | path = "src/main.rs" 19 | 20 | [dependencies] 21 | windows = { version = "*", features = [ 22 | "Win32_System_Registry", 23 | "Win32_System_LibraryLoader", 24 | "Win32_System_Diagnostics", 25 | "Win32_System_SystemInformation", 26 | "Win32_System_Diagnostics_Debug", 27 | "Win32_System_Threading", 28 | "Win32_System_ProcessStatus", 29 | "Win32_System_Diagnostics_ToolHelp", 30 | "Win32_Security", 31 | "Win32_Foundation", 32 | "Win32_System_Com", 33 | "Win32_UI_Shell", 34 | "Win32_UI_Shell_Common" 35 | ] } 36 | serde = { version = "*", features = ["derive"] } 37 | serde_json = "*" 38 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/UI/IPageHeaderProvider.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.UI; 19 | 20 | internal interface IPageHeaderProvider 21 | { 22 | string HeaderTitle { get; } 23 | Uri? HeaderGuideUri { get; } 24 | } 25 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/CommonCore.shproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 076556fd-204b-4b34-9fb9-82e48a87e3e4 5 | 18.0 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /Wiki posts/Harden System Security/Manage Installed Apps.md: -------------------------------------------------------------------------------- 1 | # Manage Installed Apps | Harden System Security 2 | 3 |
4 | 5 | Manage Installed Apps | Harden System Security 6 | 7 |
8 | 9 |
10 | 11 | On this page, you are able to retrieve the complete list of installed applications on the system along with their full details, including version numbers, installation dates, installation paths and more. You can uninstall any app(s) you don't want to be on your system. If the app(s) you selected are uninstallable then [the Harden System Security](https://github.com/HotCakeX/Harden-Windows-Security/wiki/Harden-System-Security) will try to uninstall them for all users first and if that fails then it will uninstall them for the current user only. The actions it takes are logged in the Logs page for you to review. Use the search bar to easily find the app(s) you are looking for. 12 | 13 |
14 | -------------------------------------------------------------------------------- /AppControl Manager/Assets/External/Sparkle.svg: -------------------------------------------------------------------------------- 1 | 2 | 3 | 6 | 8 | 9 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /AppControl Manager/Others/OpusSigner.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.Others; 19 | 20 | internal sealed class OpusSigner(string tbsHash, string subjectCN) 21 | { 22 | internal string TBSHash => tbsHash; 23 | internal string SubjectCN => subjectCN; 24 | } 25 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/Others/LogLine.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.Others; 19 | 20 | /// 21 | /// Represents one log line. 22 | /// 23 | internal sealed class LogLine(string text) 24 | { 25 | internal string Text => text; 26 | } 27 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/ComManager/Network/NetConnectionProfilesManager.h: -------------------------------------------------------------------------------- 1 | #pragma once 2 | #include 3 | #include 4 | #include 5 | #include "../Globals.h" 6 | #include "../StringUtilities.h" 7 | #include "../ComHelpers.h" 8 | 9 | namespace NetworkProfiles 10 | { 11 | // Returns true if every MSFT_NetConnectionProfile has NetworkCategory == 0 (Public) OR no profiles exist. 12 | // Returns false if any profile has a different NetworkCategory OR if an error occurs. 13 | extern "C" __declspec(dllexport) bool __stdcall NET_AreAllNetworkLocationsPublic(); 14 | 15 | // Parameter 'category' must be 0 or 1. 16 | // 2 (DomainAuthenticated) is rejected (cannot be set manually; assigned automatically by NLA). 17 | // Sets NetworkCategory on ALL MSFT_NetConnectionProfile instances to the requested value. 18 | // Returns true if update succeeded for all profiles (or none found), false if any failure (error set). 19 | // Uses full instance re-fetch (GetObject) before PutInstance to avoid WBEM_E_INVALID_OBJECT on projected objects. 20 | extern "C" __declspec(dllexport) bool __stdcall NET_SetAllNetworkLocationsCategory(int category); 21 | } 22 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/UI/IInvisibleCrumbar.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.UI; 19 | 20 | /// 21 | /// Used to tag pages that shouldn't show crumbbar when loaded in the main window's frame. 22 | /// 23 | internal interface IInvisibleCrumbar { } 24 | -------------------------------------------------------------------------------- /Wiki posts/Harden System Security/Certificate Checking.md: -------------------------------------------------------------------------------- 1 | # Certificate Checking | Harden System Security 2 | 3 |

Certificate Checking Commands - Harden Windows Security

4 | 5 |
6 | 7 | This page in the [Harden System Security App](https://github.com/HotCakeX/Harden-Windows-Security/wiki/Harden-System-Security) is dedicated to enumerating every certificate across all stores in the **Local Machine** and **Current User** scopes. Certificates can be sorted, searched, and removed as needed. 8 | 9 | There is a key capability identifying certificates that are **not rooted** to [the Microsoft's Trusted Roots list](https://learn.microsoft.com/security/trusted-root/participants-list) and presents options for remediation. When evaluating trust, the app does **not** rely on the system's certificate store; it uses an independent, built-in trust anchor to validate certificates, so its checks remain unaffected by a potentially compromised system store. 10 | 11 |
12 | -------------------------------------------------------------------------------- /AppControl Manager/SimulationMethods/SimulationOutputSource.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.SimulationMethods; 19 | 20 | internal enum SimulationOutputSource 21 | { 22 | None, 23 | Signer, 24 | AllowAllRule, 25 | Unsigned, 26 | CatalogSigned, 27 | Hash, 28 | FilePath 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/IntelGathering/EventAction.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.IntelGathering; 19 | 20 | /// 21 | /// Defines the action type of Code Integrity and AppLocker event logs. 22 | /// 23 | internal enum EventAction : int 24 | { 25 | Audit = 0, 26 | Block 27 | } 28 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/MicrosoftGraph/AuthenticationContext.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.MicrosoftGraph; 19 | 20 | /// 21 | /// Used to determine which scope to use 22 | /// 23 | internal enum AuthenticationContext 24 | { 25 | Intune, 26 | MDEAdvancedHunting 27 | } 28 | -------------------------------------------------------------------------------- /AppControl Manager/IntelGathering/FileIdentityOrigin.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.IntelGathering; 19 | 20 | /// 21 | /// Defines the origin of a FileIdentity. 22 | /// 23 | internal enum FileIdentityOrigin 24 | { 25 | EventLog, 26 | MDEAdvancedHunting, 27 | DirectFileScan 28 | } 29 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/SSType.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.SiPolicyIntel; 19 | 20 | /// 21 | /// Defines the signing Scenario the SiPolicy elements belong to and for all App Control policies. 22 | /// 23 | internal enum SSType : int 24 | { 25 | KernelMode = 0, 26 | UserMode = 1 27 | } 28 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/GroupPolicyContext.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.GroupPolicy; 19 | 20 | /// 21 | /// Determines whether policies belong to the Machine POL file or User POL file. 22 | /// 23 | internal enum GroupPolicyContext : uint 24 | { 25 | Machine = 0, 26 | User = 1 27 | } 28 | -------------------------------------------------------------------------------- /Harden System Security/Hardware/GpuInformationCollection.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Runtime.InteropServices; 19 | 20 | namespace HardenSystemSecurity.Hardware; 21 | 22 | [StructLayout(LayoutKind.Sequential)] 23 | internal struct GpuInformationCollection 24 | { 25 | internal IntPtr gpu_information; 26 | internal int total_count; 27 | } 28 | -------------------------------------------------------------------------------- /AppControl Manager/PolicyEditor/SignatureBasedRuleType.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.PolicyEditor; 19 | 20 | /// 21 | /// Levels used by the Policy Editor 22 | /// 23 | internal enum SignatureBasedRuleType 24 | { 25 | Signer, 26 | WHQLPublisher, 27 | UpdatePolicySigner, 28 | SupplementalPolicySigner 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/MicrosoftGraph/IGraphAuthHost.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.MicrosoftGraph; 19 | 20 | // Host interface for viewmodels that want to use the GraphAuthPanel user control. 21 | internal interface IGraphAuthHost 22 | { 23 | AuthenticationCompanion AuthCompanionCLS { get; } 24 | bool AreElementsEnabled { get; } 25 | } 26 | -------------------------------------------------------------------------------- /.github/ISSUE_TEMPLATE/Security_Measure_Suggestion.yaml: -------------------------------------------------------------------------------- 1 | name: New Security Measure Suggestion 🫰 2 | description: Suggest a new Security Measure to be added 3 | title: "[Suggestion]: " 4 | labels: ["Suggestion ⚡"] 5 | projects: "Project: Harden Windows Security" 6 | assignees: 7 | - HotCakeX 8 | body: 9 | - type: markdown 10 | attributes: 11 | value: | 12 | Thanks for taking the time to suggest a new Security measure! 13 | - type: checkboxes 14 | id: Not-Duplicate 15 | attributes: 16 | label: Are you sure the Security measure is not already implemented? 17 | description: Please make sure the new Security measure that you are suggesting to be added isn't already implemented in this GitHub repository, Thank you! 😊 18 | options: 19 | - label: Yes, I have checked and the Security measure I'm suggesting to be implemented is not duplicate. 🫡 20 | required: true 21 | - type: textarea 22 | id: Explanation 23 | attributes: 24 | label: Please explain your new Security measure suggestion 25 | description: Please explain your new Security measure suggestion and be as detailed as possible. 🙏 26 | placeholder: "I want to suggest..." 27 | validations: 28 | required: true 29 | 30 | -------------------------------------------------------------------------------- /AppControl Manager/PolicyEditor/FileBasedRuleType.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.PolicyEditor; 19 | 20 | /// 21 | /// Levels used by the Policy Editor 22 | /// 23 | internal enum FileBasedRuleType 24 | { 25 | Allow, 26 | Deny, 27 | FileRule, 28 | CompoundPublisher // For FilePublisher and WHQLFilePublisher levels 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/WindowComponents/IAnimatedIconsManager.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using Microsoft.UI.Xaml; 19 | 20 | namespace AppControlManager.WindowComponents; 21 | 22 | /// 23 | /// This interface tags certain pages that interact with the Sidebar. 24 | /// 25 | internal interface IAnimatedIconsManager 26 | { 27 | void SetVisibility(Visibility visibility); 28 | } 29 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/QuantumRelay/BinaryProtocol.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.QuantumRelay; 19 | 20 | internal enum RequestCommand : byte 21 | { 22 | RunProcess = 1 23 | } 24 | 25 | internal enum ResponseType : byte 26 | { 27 | Final = 1, // string output 28 | Log = 2, // string message 29 | Error = 255 // int exitCode, string errorMessage 30 | } 31 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/Source.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.GroupPolicy; 19 | 20 | /// 21 | /// The source of the policy in the JSON file. 22 | /// 23 | internal enum Source : uint 24 | { 25 | GroupPolicy = 0, 26 | Registry = 1 // Security group policies from INF files' registry sections + regular registry-based security measures. 27 | } 28 | -------------------------------------------------------------------------------- /Harden System Security/Protect/GroupInfoListForMUnit.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Collections.Generic; 19 | 20 | namespace HardenSystemSecurity.Protect; 21 | 22 | internal sealed partial class GroupInfoListForMUnit(IEnumerable items, string key) : List(items) 23 | { 24 | internal string Key => key; 25 | 26 | public override string ToString() 27 | { 28 | return "Group " + Key; 29 | } 30 | } 31 | -------------------------------------------------------------------------------- /AppControl Manager/Others/CertificateSignerCreator.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicyIntel; 19 | 20 | namespace AppControlManager.Others; 21 | 22 | internal sealed class CertificateSignerCreator(string tbs, string signerName, SSType siSigningScenario) 23 | { 24 | internal string TBS => tbs; 25 | internal string SignerName => signerName; 26 | internal SSType SiSigningScenario => siSigningScenario; 27 | } 28 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/MicrosoftGraph/IntunePolicyFileItem.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.MicrosoftGraph; 19 | 20 | /// 21 | /// Data type for hardening policy JSON files listing in the ComboBox. 22 | /// 23 | internal sealed class IntunePolicyFileItem(string fileName, string fullPath) 24 | { 25 | internal string FileName => fileName; 26 | internal string FullPath => fullPath; 27 | } 28 | -------------------------------------------------------------------------------- /AppControl Manager/Others/FilePathCreator.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicyIntel; 19 | 20 | namespace AppControlManager.Others; 21 | 22 | internal sealed class FilePathCreator(string filePath, string minimumFileVersion, SSType siSigningScenario) 23 | { 24 | internal string FilePath => filePath; 25 | internal string MinimumFileVersion => minimumFileVersion; 26 | internal SSType SiSigningScenario => siSigningScenario; 27 | } 28 | -------------------------------------------------------------------------------- /Wiki posts/AppControl Manager/Get Code Integrity Hashes.md: -------------------------------------------------------------------------------- 1 | # Get Code Integrity Hashes 2 | 3 |
4 | 5 | AppControl Manager Application's Get Code Integrity Hashes Page 6 | 7 |
8 | 9 |
10 | 11 |
12 | 13 | Use this [AppControl Manager](https://github.com/HotCakeX/Harden-Windows-Security/wiki/AppControl-Manager) page to calculate Code Integrity hashes of the files. Code Integrity hashes are those that the Code Integrity in Windows primarily uses: SHA1 and SHA2-256 1st page hashes, SHA1 and SHA2-256 Authenticode hashes. 14 | 15 | Use the browse button to select a file and the hashes will be immediately calculated and displayed on the page. 16 | 17 | > [!NOTE]\ 18 | > If the selected file is non-conformant, the app will calculate the flat hashes of the file and present them as Authenticode hashes. When that happens, the page hashes will be displayed as `N/A`. This is compliant with how the App Control engine in Windows works. 19 | 20 |
21 | 22 | This page also calculates the new [secure](https://csrc.nist.gov/pubs/fips/202/final) SHA3-384 and SHA3-512 flat file hashes. 23 | 24 |
25 | 26 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/Others/UnifiedSearchBarResult.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using Microsoft.UI.Xaml.Controls; 19 | 20 | namespace CommonCore.Others; 21 | 22 | internal sealed class UnifiedSearchBarResult(Type pageType, IconElement? icon, string title, string subtitle) 23 | { 24 | internal Type PageType => pageType; 25 | internal IconElement? Icon => icon; 26 | internal string Title => title; 27 | internal string Subtitle => subtitle; 28 | } 29 | -------------------------------------------------------------------------------- /AppControl Manager/WindowComponents/PageTitleMap.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Collections.Generic; 19 | 20 | namespace AppControlManager.WindowComponents; 21 | 22 | /// 23 | /// Used for the BreadCrumBar's data to define valid navigational paths in the app 24 | /// 25 | internal sealed class PageTitleMap(List titles, List pages) 26 | { 27 | internal List Titles => titles; 28 | internal List Pages => pages; 29 | } 30 | -------------------------------------------------------------------------------- /Harden System Security/Protect/DefenderPlatformUpdatesChannels.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.Protect; 19 | 20 | /// 21 | /// Update channels to number mappings for Microsoft Defender PlatformUpdatesChannel and EngineUpdatesChannel. 22 | /// 23 | internal enum DefenderPlatformUpdatesChannels : int 24 | { 25 | NotConfigured = 0, 26 | Beta = 2, 27 | Preview = 3, 28 | Staged = 4, 29 | Broad = 5, 30 | Delayed = 6 31 | } 32 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/SupplementalPolicySignerRule.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicy; 19 | 20 | namespace AppControlManager.SiPolicyIntel; 21 | 22 | internal sealed class SupplementalPolicySignerRule( 23 | Signer signerElement, 24 | SupplementalPolicySigner supplementalPolicySigner) 25 | { 26 | internal Signer SignerElement => signerElement; 27 | internal SupplementalPolicySigner SupplementalPolicySigner => supplementalPolicySigner; 28 | } 29 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/exploit_mitigations/.cargo/config.toml: -------------------------------------------------------------------------------- 1 | [build] 2 | target-dir = "target" 3 | 4 | [target.x86_64-pc-windows-msvc] 5 | rustflags = [ 6 | "-Z", "ehcont-guard=true", 7 | "-C", "control-flow-guard=true", 8 | "-Z", "cf-protection=full", 9 | "-C", "target-cpu=x86-64-v2", 10 | "-C", "target-feature=+crt-static", 11 | ] 12 | 13 | [target.aarch64-pc-windows-msvc] 14 | rustflags = [ 15 | "-Z", "ehcont-guard=true", 16 | "-C", "control-flow-guard=true", 17 | "-C", "target-feature=+crt-static", 18 | ] 19 | 20 | [alias] 21 | build_x64 = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release" 22 | build_arm64 = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release" 23 | build_x64_lib = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release --lib" 24 | build_arm64_lib = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release --lib" 25 | build_x64_bin = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release --bin exploit_mitigations" 26 | build_arm64_bin = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release --bin exploit_mitigations" 27 | build_x64_all = "-Z build-std build --target x86_64-pc-windows-msvc --verbose --release --bins --lib" 28 | build_arm64_all = "-Z build-std build --target aarch64-pc-windows-msvc --verbose --release --bins --lib" 29 | -------------------------------------------------------------------------------- /AppControl Manager/Others/UpdateCheckResponse.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.Others; 19 | 20 | /// 21 | /// Represents an object that is the response of an update check for the AppControl Manager app 22 | /// 23 | internal sealed class UpdateCheckResponse( 24 | bool isNewVersionAvailable, 25 | Version onlineVersion) 26 | { 27 | internal bool IsNewVersionAvailable => isNewVersionAvailable; 28 | internal Version OnlineVersion => onlineVersion; 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/PartnerCenter/PartnerCenter.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | Exe 4 | $(FileVersion) 5 | 1.0.0.0 6 | $(FileVersion) 7 | true 8 | false 9 | True 10 | True 11 | full 12 | true 13 | false 14 | true 15 | false 16 | false 17 | Speed 18 | Partner Center 19 | Violet Hansen 20 | Partner Center 21 | none 22 | Partner Center, Microsoft 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/RegistryValueType.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.GroupPolicy; 19 | 20 | internal enum RegistryValueType : uint 21 | { 22 | REG_NONE = 0, 23 | REG_SZ = 1, 24 | REG_EXPAND_SZ = 2, 25 | REG_BINARY = 3, 26 | REG_DWORD = 4, 27 | REG_DWORD_BIG_ENDIAN = 5, 28 | REG_LINK = 6, 29 | REG_MULTI_SZ = 7, 30 | REG_RESOURCE_LIST = 8, 31 | REG_FULL_RESOURCE_DESCRIPTOR = 9, 32 | REG_RESOURCE_REQUIREMENTS_LIST = 10, 33 | REG_QWORD = 11 34 | } 35 | -------------------------------------------------------------------------------- /AppControl Manager/Others/CertificateDetailsCreator.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.Others; 19 | 20 | internal sealed class CertificateDetailsCreator(string intermediateCertTBS, string intermediateCertName, string leafCertTBS, string leafCertName) 21 | { 22 | internal string IntermediateCertTBS => intermediateCertTBS; 23 | internal string IntermediateCertName => intermediateCertName; 24 | internal string LeafCertTBS => leafCertTBS; 25 | internal string LeafCertName => leafCertName; 26 | } 27 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/DenyRule.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicy; 19 | 20 | namespace AppControlManager.SiPolicyIntel; 21 | 22 | // For levels: Hash, FileName, FilePath, PFN 23 | internal sealed class DenyRule( 24 | Deny denyElement, 25 | FileRuleRef fileRuleRefElement, 26 | SSType signingScenario) 27 | { 28 | internal Deny DenyElement => denyElement; 29 | internal FileRuleRef FileRuleRefElement => fileRuleRefElement; 30 | internal SSType SigningScenario => signingScenario; 31 | } 32 | -------------------------------------------------------------------------------- /AppControl Manager/IntelGathering/KernelUserVerdict.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Collections.Generic; 19 | using AppControlManager.SiPolicyIntel; 20 | 21 | namespace AppControlManager.IntelGathering; 22 | 23 | internal sealed class KernelUserVerdict( 24 | SSType verdict, 25 | bool isPE, 26 | bool hasSIP, 27 | List imports 28 | ) 29 | { 30 | internal SSType Verdict => verdict; 31 | internal bool IsPE => isPE; 32 | internal bool HasSIP => hasSIP; 33 | internal List Imports => imports; 34 | } 35 | -------------------------------------------------------------------------------- /Wiki posts/Harden System Security/File Reputation.md: -------------------------------------------------------------------------------- 1 | # File Reputation | Harden System Security 2 | 3 |
4 | 5 | File Reputation | Harden System Security 6 | 7 |
8 | 9 |
10 | 11 | On this page of the [Harden System Security](https://github.com/HotCakeX/Harden-Windows-Security/wiki/Harden-System-Security), you're able to query any file on the system to retrieve its reputation information. The source of this data is [Microsoft's Intelligent Security Graph](https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/design/use-appcontrol-with-intelligent-security-graph) when the [Smart App Control](https://learn.microsoft.com/windows/apps/develop/smart-app-control/overview) is enabled or in Evaluation Mode, otherwise it will be the [SmartScreen](https://learn.microsoft.com/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/) which supplies the reputation data for this feature. 12 | 13 | Simply browse for a file or drag and drop it into the page to evaluate its reputation. The drag and drop feature only works when the app is not running with elevated privileges. 14 | 15 |
16 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/Edge.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/TLS.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/UAC.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/Others/LanguageOption.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace CommonCore.Others; 19 | 20 | /// 21 | /// Used by the ComboBox Items in the Settings page to display the language options. 22 | /// 23 | /// Name of the language. 24 | /// Path to the picture file of the country flag. 25 | internal sealed class LanguageOption(string name, string image) 26 | { 27 | internal string Name => name; 28 | internal string Image => image; 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/Properties/PublishProfiles/win-x64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | FileSystem 8 | Release 9 | x64 10 | win-x64 11 | true 12 | False 13 | 14 | 26 | x86-64-v2 27 | 28 | 29 | MSIXOutputX64\ 30 | 31 | 32 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/QuantumRelayHSS/Program.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace QuantumRelayHSS; 19 | 20 | internal static class Program 21 | { 22 | internal static int Main() 23 | { 24 | try 25 | { 26 | return WindowsServiceHost.Run(); 27 | } 28 | catch (Exception ex) 29 | { 30 | NativeEventLogger.WriteEntry( 31 | $"{Atlas.QuantumRelayHSSServiceName} Fatal error starting service: {ex.Message}\n{ex.StackTrace}", 32 | NativeEventLogger.EventLogEntryType.Error); 33 | 34 | return 1; 35 | } 36 | } 37 | } 38 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/LockScreen.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/NonAdmin.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/WindowsUpdate.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | -------------------------------------------------------------------------------- /Harden System Security/Properties/PublishProfiles/win-x64.pubxml: -------------------------------------------------------------------------------- 1 | 2 | 5 | 6 | 7 | FileSystem 8 | Release 9 | x64 10 | win-x64 11 | true 12 | False 13 | 14 | 26 | x86-64-v2 27 | 28 | 29 | MSIXOutputX64\ 30 | 31 | 32 | -------------------------------------------------------------------------------- /Wiki posts/Miscellaneous/Git GitHub Desktop and Mandatory ASLR.md: -------------------------------------------------------------------------------- 1 | # Git GitHub Desktop and Mandatory ASLR 2 | 3 | Git executables are among the few poorly written programs that have problem with Mandatory ASLR (Address Space Layout Randomization) Exploit protection feature. When you turn on Mandatory ASLR in Microsoft Defender (which is off by default), those executables fail to run. 4 | 5 | The same Git executables are bundled with GitHub desktop app. In order to use Git in Visual Studio Code or use GitHub desktop app, we need to exclude Git executables from Mandatory ASLR and let them bypass it. Executables can be excluded from Mandatory ASLR rebootlessly. 6 | 7 | You can use the following PowerShell commands to automatically add all Git executables bundled with GitHub desktop or Git itself, to the exclusion for Mandatory ASLR 8 | 9 |
10 | 11 | ## For GitHub desktop Git binaries 12 | 13 | ```powershell 14 | Get-ChildItem -Recurse -Path "C:\Users\$env:username\AppData\Local\GitHubDesktop\*\resources\app\git\*.exe" | ForEach-Object -Process { Set-ProcessMitigation -Name $_.Name -Disable ForceRelocateImages } 15 | ``` 16 | 17 |
18 | 19 | ## For Git binaries installed using standalone installer 20 | 21 | ```powershell 22 | Get-ChildItem -Recurse -File -Path 'C:\Program Files\Git\*.exe' | ForEach-Object -Process { Set-ProcessMitigation -Name $_.Name -Disable ForceRelocateImages } 23 | ``` 24 | 25 |
26 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/DeviceGuard.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/DISMService/Logger.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace DISMService; 19 | 20 | internal static class Logger 21 | { 22 | private static Action? _logHandler; 23 | 24 | internal static void SetLogHandler(Action handler) => 25 | _logHandler = handler; 26 | 27 | internal static void Write(string message, LogTypeIntel logType) => 28 | _logHandler?.Invoke(message, logType); 29 | } 30 | 31 | internal enum LogTypeIntel 32 | { 33 | Information, 34 | Warning, 35 | Error 36 | } 37 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/WindowsNetworking.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /AppControl Manager/Pages/UpdatePageCustomMSIXPath.xaml.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using Microsoft.UI.Xaml.Controls; 19 | using Microsoft.UI.Xaml.Navigation; 20 | 21 | namespace AppControlManager.Pages; 22 | 23 | internal sealed partial class UpdatePageCustomMSIXPath : Page 24 | { 25 | private ViewModels.UpdateVM ViewModel { get; } = ViewModels.ViewModelProvider.UpdateVM; 26 | 27 | internal UpdatePageCustomMSIXPath() 28 | { 29 | InitializeComponent(); 30 | NavigationCacheMode = NavigationCacheMode.Disabled; 31 | DataContext = ViewModel; 32 | } 33 | } 34 | -------------------------------------------------------------------------------- /Harden System Security/Pages/Protects/MiscellaneousConfigs.xaml: -------------------------------------------------------------------------------- 1 | 2 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 23 | 24 | 27 | 28 | 29 | 30 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/Atlas.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | global using System; 19 | global using CommonCore; 20 | global using CommonCore.Interop; 21 | global using CommonCore.Others; 22 | 23 | namespace CommonCore; 24 | 25 | /// 26 | /// Hosts constants for all of the projects that utilize the CommonCore. 27 | /// 28 | internal static class Atlas 29 | { 30 | internal const string QuantumRelayHSSServiceName = "QuantumRelayHSS"; 31 | internal const string QuantumRelayHSSPipeName = $"{QuantumRelayHSSServiceName}_CommandPipe"; 32 | } 33 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/AllowRule.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicy; 19 | 20 | namespace AppControlManager.SiPolicyIntel; 21 | 22 | /// 23 | /// For levels: Hash, FileName, FilePath, PFN 24 | /// 25 | internal sealed class AllowRule( 26 | Allow allowElement, 27 | FileRuleRef fileRuleRefElement, 28 | SSType signingScenario) 29 | { 30 | internal Allow AllowElement => allowElement; 31 | internal FileRuleRef FileRuleRefElement => fileRuleRefElement; 32 | internal SSType SigningScenario => signingScenario; 33 | } 34 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/MicrosoftGraph/QueryPayload.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Text.Json.Serialization; 19 | 20 | namespace CommonCore.MicrosoftGraph; 21 | 22 | /// 23 | /// Represents a payload for a query with an optional query string. The query string can be serialized to JSON. 24 | /// 25 | internal sealed class QueryPayload( 26 | string? query 27 | ) 28 | { 29 | /// 30 | /// The query string. 31 | /// 32 | [JsonInclude] 33 | [JsonPropertyName("Query")] 34 | internal string? Query => query; 35 | } 36 | -------------------------------------------------------------------------------- /AppControl Manager/Pages/SystemInformation/CodeIntegrityInfo.xaml.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using Microsoft.UI.Xaml.Controls; 19 | using Microsoft.UI.Xaml.Navigation; 20 | 21 | namespace AppControlManager.Pages; 22 | 23 | internal sealed partial class CodeIntegrityInfo : Page 24 | { 25 | private ViewModels.CodeIntegrityInfoVM ViewModel { get; } = ViewModels.ViewModelProvider.CodeIntegrityInfoVM; 26 | 27 | internal CodeIntegrityInfo() 28 | { 29 | InitializeComponent(); 30 | NavigationCacheMode = NavigationCacheMode.Disabled; 31 | DataContext = ViewModel; 32 | } 33 | } 34 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/CustomMethods.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Runtime.CompilerServices; 19 | 20 | namespace AppControlManager.SiPolicyIntel; 21 | 22 | internal static class CustomMethods 23 | { 24 | [MethodImpl(MethodImplOptions.AggressiveInlining)] 25 | internal static int GetByteArrayHashCode(byte[] data) 26 | { 27 | int hash = 17; 28 | 29 | foreach (byte b in data) 30 | { 31 | unchecked 32 | { 33 | hash = hash * 31 + b; // Allow overflow, it will wrap around naturally 34 | } 35 | } 36 | 37 | return hash; 38 | } 39 | } 40 | -------------------------------------------------------------------------------- /AppControl Manager/SiPolicyIntel/UpdatePolicySignerRule.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicy; 19 | 20 | namespace AppControlManager.SiPolicyIntel; 21 | 22 | /// 23 | /// Represents a rule for updating a policy signer with a signer element and an update policy signer. 24 | /// 25 | internal sealed class UpdatePolicySignerRule( 26 | Signer signerElement, 27 | UpdatePolicySigner updatePolicySigner) 28 | { 29 | internal Signer SignerElement => signerElement; 30 | internal UpdatePolicySigner UpdatePolicySigner => updatePolicySigner; 31 | } 32 | -------------------------------------------------------------------------------- /Harden System Security/Protect/ProtectionPresetComboBoxType.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace HardenSystemSecurity.Protect; 19 | 20 | /// 21 | /// Represents a protection preset item for ComboBox with rating display. 22 | /// 23 | /// The display name of the preset for UI. 24 | /// The rating displayed on the UI. 25 | internal sealed class ProtectionPresetComboBoxType(string friendlyName, int rating) 26 | { 27 | internal string FriendlyName => friendlyName; 28 | internal int Rating => rating; 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/Others/HashCreator.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using AppControlManager.SiPolicyIntel; 19 | 20 | namespace AppControlManager.Others; 21 | 22 | internal sealed class HashCreator(string authenticodeSHA256, string authenticodeSHA1, string filePath, string? fileName, SSType siSigningScenario) 23 | { 24 | internal string AuthenticodeSHA256 => authenticodeSHA256; 25 | internal string AuthenticodeSHA1 => authenticodeSHA1; 26 | internal string FilePath => filePath; 27 | internal string? FileName => fileName; 28 | internal SSType SiSigningScenario => siSigningScenario; 29 | } 30 | -------------------------------------------------------------------------------- /AppControl Manager/WindowComponents/Crumb.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | namespace AppControlManager.WindowComponents; 19 | 20 | /// 21 | /// https://learn.microsoft.com/windows/apps/design/controls/breadcrumbbar#itemssource 22 | /// Represents an item in the BreadCrumBar's ItemsSource collection 23 | /// 24 | /// 25 | /// 26 | internal readonly struct Crumb(string label, Type page) 27 | { 28 | internal string Label => label; 29 | internal Type Page => page; 30 | public override string ToString() => Label; 31 | } 32 | -------------------------------------------------------------------------------- /Harden System Security/GroupPolicy/PolicyInputJsonContext.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Collections.Generic; 19 | using System.Text.Json.Serialization; 20 | 21 | namespace HardenSystemSecurity.GroupPolicy; 22 | 23 | [JsonSourceGenerationOptions( 24 | PropertyNamingPolicy = JsonKnownNamingPolicy.CamelCase, 25 | PropertyNameCaseInsensitive = true, 26 | WriteIndented = true)] 27 | [JsonSerializable(typeof(RegistryPolicyEntry))] 28 | [JsonSerializable(typeof(List))] 29 | internal sealed partial class PolicyInputJsonContext : JsonSerializerContext 30 | { 31 | } 32 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/CommonCore/MicrosoftGraph/ConfigurationPolicyAssignmentsEnvelope.cs: -------------------------------------------------------------------------------- 1 | // MIT License 2 | // 3 | // Copyright (c) 2023-Present - Violet Hansen - (aka HotCakeX on GitHub) - Email Address: spynetgirl@outlook.com 4 | // 5 | // Permission is hereby granted, free of charge, to any person obtaining a copy 6 | // of this software and associated documentation files (the "Software"), to deal 7 | // in the Software without restriction, including without limitation the rights 8 | // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | // copies of the Software, and to permit persons to whom the Software is 10 | // furnished to do so, subject to the following conditions: 11 | // 12 | // The above copyright notice and this permission notice shall be included in all 13 | // copies or substantial portions of the Software. 14 | // 15 | // See here for more information: https://github.com/HotCakeX/Harden-Windows-Security/blob/main/LICENSE 16 | // 17 | 18 | using System.Collections.Generic; 19 | using System.Text.Json.Serialization; 20 | 21 | namespace CommonCore.MicrosoftGraph; 22 | 23 | /// 24 | /// Envelope for configuration policy assignments. 25 | /// 26 | internal sealed class ConfigurationPolicyAssignmentsEnvelope( 27 | List assignments 28 | ) 29 | { 30 | [JsonInclude] 31 | [JsonPropertyName("assignments")] 32 | internal List Assignments => assignments; 33 | } 34 | -------------------------------------------------------------------------------- /.github/workflows/Sync to Azure DevOps.yaml: -------------------------------------------------------------------------------- 1 | name: Sync to Azure DevOps 2 | 3 | permissions: 4 | contents: read 5 | pull-requests: read 6 | 7 | on: 8 | workflow_dispatch: 9 | push: 10 | branches: [ "main" ] 11 | 12 | jobs: 13 | sync: 14 | runs-on: ubuntu-latest 15 | 16 | steps: 17 | - name: Checkout GitHub repo 18 | uses: actions/checkout@v6 19 | with: 20 | fetch-depth: 0 # This is necessary 21 | 22 | - name: Set up Git configuration 23 | run: | 24 | git config --global user.name "HotCakeX" 25 | git config --global user.email "spynetgirl@outlook.com" 26 | 27 | - name: Sync main branch to Azure DevOps 28 | env: 29 | AZURE_REPO_URL: https://SpyNetGirl@dev.azure.com/SpyNetGirl/Harden-Windows-Security/_git/Harden-Windows-Security 30 | AZURE_DEVOPS_PAT: ${{ secrets.AZUREDEVOPSPATFORSYNC }} 31 | 32 | run: | 33 | # Adding Azure DevOps repo as a remote 34 | git remote add azure "$AZURE_REPO_URL" 35 | git remote -v # Verifying the remote was added 36 | 37 | # Authenticating with Azure DevOps using PAT 38 | git config --global credential.helper store 39 | echo "https://SpyNetGirl:${AZURE_DEVOPS_PAT}@dev.azure.com" > ~/.git-credentials 40 | 41 | # Pushing only the main branch to Azure DevOps 42 | # The 2 repositories will be completely identical and any discrepancy is taken care of by force push 43 | git push azure main --force 44 | -------------------------------------------------------------------------------- /.github/copilot-instructions.md: -------------------------------------------------------------------------------- 1 | Please follow these guidelines when contributing: 2 | 3 | ## Repository Structure 4 | - `AppControl Manager/`: The main directory for the AppControl Manager application. 5 | - `AppControl Manager/eXclude/`: Ignore everything in this directory, they are not part of the AppControl Manager application files. 6 | - `Harden System Security/`: The main directory for the Harden System Security application. 7 | 8 | ## Key Guidelines 9 | 1. Use the latest .NET and C# features when working with C# or .NET code. 10 | 2. Use the latest features of the Rust language when working with Rust code. 11 | 3. Use the latest features of the C++ language when working with C++ code. 12 | 4. Maintain existing code structure and organization. 13 | 5. Comment the new changes properly. 14 | 6. Never add extra dependencies to the projects. 15 | 7. Always make sure the code you add or modify is compatible with Native AOT compilation if you're working with C# or .NET code. 16 | 8. Use Internal types when working with C# or .NET code. 17 | 9. Define variable types explicitly instead of using the `var` keyword when working with C# or .NET code. 18 | 10. Do not make unnecessary changes to the code. 19 | 11. Do not remove any existing comments from the code unless the comments are no longer correct or valid. 20 | 12. Define variable types explicitly after `let` keyword and variable name when working with Rust code. 21 | 13. Do not use reflection when working with C# or .NET code. 22 | -------------------------------------------------------------------------------- /AppControl Manager/eXclude/DISMService/DISMService.csproj: -------------------------------------------------------------------------------- 1 | 2 | 3 | WinExe 4 | $(FileVersion) 5 | 1.0.0.0 6 | DISMService 7 | Violet Hansen 8 | DISM Service Component of the Harden System Security app. 9 | $(FileVersion) 10 | True 11 | True 12 | full 13 | true 14 | false 15 | true 16 | false 17 | false 18 | false 19 | false 20 | True 21 | True 22 | none 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | --------------------------------------------------------------------------------