Notes

[*] 8/30/2022 6:18:25 PM - Starting Category Administrative Templates: Windows Components
[😿] ID 1700, App Package Deployment: Allow a Windows app to share application data between users, Result=1, Recommended=0, Severity=Medium
[😿] ID 1701, App Privacy: Let Windows apps activate with voice while the system is locked, Result=0, Recommended=2, Severity=Medium
[😿] ID 1702, App runtime: Block launching Universal Windows apps with Windows Runtime API access from hosted content, Result=0, Recommended=1, Severity=Medium
[😿] ID 1703, Application Compatibility: Turn off Application Telemetry, Result=1, Recommended=0, Severity=Medium
[😿] ID 1704, AutoPlay Policies: Turn off Autoplay, Result=0, Recommended=255, Severity=Medium
[😿] ID 1705, AutoPlay Policies: Disallow Autoplay for non-volume devices, Result=0, Recommended=1, Severity=Medium
[😿] ID 1706, AutoPlay Policies: Set the default behavior for AutoRun, Result=0, Recommended=1, Severity=Medium
[😿] ID 1707, Biometrics: Allow the use of biometrics, Result=1, Recommended=0, Severity=Medium
[🙀] ID 1708, BitLocker Drive Encryption: Volume status, Result=FullyDecrypted, Recommended=FullyEncrypted, Severity=High
[😺] ID 1761, BitLocker Drive Encryption: Choose drive encryption method and cipher strength (for operating system drives), Result=6, Severity=Passed
[😿] ID 1762, BitLocker Drive Encryption: Drive encryption method (for operating system drives), Result=None, Recommended=XtsAes128, Severity=Medium
[😿] ID 1709, BitLocker Drive Encryption: Disable new DMA devices when this computer is locked, Result=0, Recommended=1, Severity=Medium
[😿] ID 1710, BitLocker Drive Encryption: Operating System Drives: Allow Secure Boot for integrity validation, Result=0, Recommended=1, Severity=Medium
[😿] ID 1711, BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup, Result=0, Recommended=1, Severity=Medium
[😿] ID 1715, BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Allow BitLocker without a compatible TPM, Result=1, Recommended=0, Severity=Medium
[😺] ID 1716, BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup, Result=0, Severity=Passed
[😿] ID 1717, BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup PIN, Result=0, Recommended=1, Severity=Medium
[😺] ID 1718, BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup key, Result=0, Severity=Passed
[😺] ID 1719, BitLocker Drive Encryption: Operating System Drives: Require additional authentication at startup: Configure TPM startup key and PIN, Result=0, Severity=Passed
[😿] ID 1712, BitLocker Drive Encryption: Operating System Drives: Allow enhanced PINs for startup, Result=0, Recommended=1, Severity=Medium
[😿] ID 1713, BitLocker Drive Encryption: Operating System Drives: Configure use of hardware-based encryption for operating system drives, Result=0, Recommended=1, Severity=Medium[😿] ID 1714, BitLocker Drive Encryption: Operating System Drives: Use BitLocker software-based encryption when hardware encryption is not available, Result=0, Recommended=1, Severity=Medium
[😿] ID 1763, BitLocker Drive Encryption: Operating System Drives: Configure minimum PIN length for startup, Result=, Recommended=8, Severity=Medium
[😿] ID 1720, Cloud Content: Do not show Windows tips, Result=0, Recommended=1, Severity=Medium
[😿] ID 1721, Cloud Content: Turn off Microsoft consumer experiences, Result=0, Recommended=1, Severity=Medium
[😿] ID 1722, Credential User Interface: Do not display the password reveal button, Result=0, Recommended=1, Severity=Medium
[😿] ID 1724, Credential User Interface: Enumerate administrator accounts on elevation, Result=1, Recommended=0, Severity=Medium
[😿] ID 1725, Data Collection and Preview Builds: Allow Diagnostic Data, Result=2, Recommended=1, Severity=Medium
[😿] ID 1726, Data Collection and Preview Builds: Allow device name to be sent in Windows diagnostic data, Result=1, Recommended=0, Severity=Medium
[😿] ID 1727, Delivery Optimization: Download Mode, Result=1, Recommended=99, Severity=Medium
[😿] ID 1728, Event Log Service: Application: Specify the maximum log file size (KB), Result=4096, Recommended=32768, Severity=Medium
[😿] ID 1729, Event Log Service: Security: Specify the maximum log file size (KB), Result=4096, Recommended=196608, Severity=Medium
[😿] ID 1730, Event Log Service: System: Specify the maximum log file size (KB), Result=4096, Recommended=32768, Severity=Medium
[😺] ID 1731, File Explorer: Allow the use of remote paths in file shortcut icons, Result=0, Severity=Passed
[😿] ID 1732, HomeGroup: Prevent the computer from joining a homegroup, Result=0, Recommended=1, Severity=Medium


[*] 8/30/2022 6:18:25 PM - Starting Category Microsoft Defender Antivirus
[😺] ID 1800, Turn off Microsoft Defender Antivirus, Result=0, Severity=Passed
[😿] ID 1801, Configure detection for potentially unwanted applications, Result=0, Recommended=1, Severity=Medium
[😺] ID 1806, Exclusions: Extension Exclusions (Policy), Result=, Severity=Passed
[😺] ID 1807, Exclusions: List Extension Exclusions, Result=, Severity=Passed
[😺] ID 1808, Exclusions: Path Exclusions (Policy), Result=, Severity=Passed
[😺] ID 1809, Exclusions: List Path Exclusions, Result=, Severity=Passed
[😺] ID 1810, Exclusions: Process Exclusions (Policy), Result=, Severity=Passed
[😺] ID 1811, Exclusions: List Process Exclusions, Result=, Severity=Passed
[😿] ID 1812, Enable sandboxing for Microsoft Defender Antivirus, Result=0, Recommended=1, Severity=Medium


[*] 8/30/2022 6:18:26 PM - Starting Category Microsoft Defender Exploit Guard
[😿] ID 1900, Attack Surface Reduction rules, Result=0, Recommended=1, Severity=Medium
[😿] ID 1901, ASR: Block executable content from email client and webmail (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1916, ASR: Block executable content from email client and webmail, Result=0, Recommended=1, Severity=Medium
[😿] ID 1902, ASR: Block all Office applications from creating child processes (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1917, ASR: Block all Office applications from creating child processes, Result=0, Recommended=1, Severity=Medium
[😿] ID 1903, ASR: Block Office applications from creating executable content (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1918, ASR: Block Office applications from creating executable content, Result=0, Recommended=1, Severity=Medium
[😿] ID 1904, ASR: Block Office applications from injecting code into other processes (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1919, ASR: Block Office applications from injecting code into other processes, Result=0, Recommended=1, Severity=Medium
[😿] ID 1905, ASR: Block JavaScript or VBScript from launching downloaded executable content (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1920, ASR: Block JavaScript or VBScript from launching downloaded executable content, Result=0, Recommended=1, Severity=Medium
[😿] ID 1906, ASR: Block execution of potentially obfuscated scripts (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1921, ASR: Block execution of potentially obfuscated scripts, Result=0, Recommended=1, Severity=Medium
[😿] ID 1907, ASR: Block Win32 API calls from Office macros (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1922, ASR: Block Win32 API calls from Office macros, Result=0, Recommended=1, Severity=Medium
[😿] ID 1908, ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1923, ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion, Result=0, Recommended=1, Severity=Medium
[😿] ID 1909, ASR: Use advanced protection against ransomware (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1924, ASR: Use advanced protection against ransomware, Result=0, Recommended=1, Severity=Medium
[😿] ID 1910, ASR: Block credential stealing from the Windows local security authority subsystem (lsass.exe) (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1925, ASR: Block credential stealing from the Windows local security authority subsystem (lsass.exe), Result=0, Recommended=1, Severity=Medium
[😿] ID 1911, ASR: Block process creations originating from PSExec and WMI commands (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1926, ASR: Block process creations originating from PSExec and WMI commands, Result=0, Recommended=1, Severity=Medium
[😿] ID 1912, ASR: Block untrusted and unsigned processes that run from USB (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1927, ASR: Block untrusted and unsigned processes that run from USB, Result=0, Recommended=1, Severity=Medium
[😿] ID 1913, ASR: Block Office communication application from creating child processes (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1928, ASR: Block Office communication application from creating child processes, Result=0, Recommended=1, Severity=Medium
[😿] ID 1914, ASR: Block Adobe Reader from creating child processes (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1929, ASR: Block Adobe Reader from creating child processes, Result=0, Recommended=1, Severity=Medium
[😿] ID 1915, ASR: Block persistence through WMI event subscription (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1930, ASR: Block persistence through WMI event subscription, Result=0, Recommended=1, Severity=Medium
[😿] ID 1931, ASR: Block abuse of exploited vulnerable signed drivers (Policy), Result=0, Recommended=1, Severity=Medium
[😿] ID 1932, ASR: Block abuse of exploited vulnerable signed drivers, Result=0, Recommended=1, Severity=Medium
[😺] ID 1966, ASR: Exclude files and paths from Attack Surface Reduction Rules (Policy), Result=, Severity=Passed
[😺] ID 1967, ASR: List of excluded files and paths from Attack Surface Reduction Rules, Result=, Severity=Passed
[😿] ID 1965, Network Protection: Prevent users and apps from accessing dangerous websites, Result=, Recommended=1, Severity=Medium


[*] 8/30/2022 6:18:26 PM - Starting Category Microsoft Defender Application Guard
[😿] ID 1980, Support for Microsoft Defender Application Guard, Result=, Recommended=Enabled, Severity=Medium
[😿] ID 1981, Turn on Microsoft Defender Application Guard in Managed Mode, Result=, Recommended=3, Severity=Medium
[😿] ID 1982, Allow auditing events in Microsoft Defender Application Guard, Result=, Recommended=1, Severity=Medium


[*] 8/30/2022 6:18:27 PM - Starting Category Administrative Templates: Windows Components
[😿] ID 1767, News and interests: Enable news and interests on the taskbar, Result=, Recommended=0, Severity=Medium
[😿] ID 1733, OneDrive: Prevent the usage of OneDrive for file storage, Result=0, Recommended=1, Severity=Medium
[😿] ID 1734, Remote Desktop Connection Client: Do not allow passwords to be saved, Result=0, Recommended=1, Severity=Medium
[😿] ID 1735, Remote Desktop Session Host: Allow users to connect remotely by using Remote Desktop Services, Result=0, Recommended=1, Severity=Medium
[😿] ID 1736, Remote Desktop Session Host: Device and Resource Redirection: Do not allow drive redirection, Result=0, Recommended=1, Severity=Medium
[😿] ID 1737, Remote Desktop Session Host: Security: Always prompt for password upon connection, Result=0, Recommended=1, Severity=Medium
[😿] ID 1738, Remote Desktop Session Host: Security: Require secure RPC communication, Result=0, Recommended=1, Severity=Medium
[😿] ID 1739, Remote Desktop Session Host: Security: Set client connection encryption level, Result=0, Recommended=3, Severity=Medium
[😿] ID 1740, Search: Allow Cloud Search, Result=1, Recommended=0, Severity=Medium
[😿] ID 1741, Search: Allow Cortana, Result=1, Recommended=0, Severity=Medium
[😿] ID 1742, Search: Allow Cortana above lock screen, Result=1, Recommended=0, Severity=Medium
[😿] ID 1743, Search: Allow indexing of encrypted files, Result=1, Recommended=0, Severity=Medium
[😿] ID 1744, Search: Allow search and Cortana to use location, Result=1, Recommended=0, Severity=Medium
[😿] ID 1745, Search: Set what information is shared in Search, Result=1, Recommended=3, Severity=Medium
[😿] ID 1746, Windows Error Reporting: Disable Windows Error Reporting, Result=0, Recommended=1, Severity=Medium
[😼] ID 1747, Windows Game Recording and Broadcasting: Enables or disables Windows Game Recording and Broadcasting, Result=1, Recommended=0, Severity=Low
[😿] ID 1748, Windows Ink Workspace: Allow Windows Ink Workspace, Result=1, Recommended=0, Severity=Medium
[😿] ID 1749, Windows Installer: Always install with elevated privileges, Result=1, Recommended=0, Severity=Medium
[😿] ID 1750, Windows Installer: Allow user control over installs, Result=1, Recommended=0, Severity=Medium
[😿] ID 1751, Windows Installer: Prevent Internet Explorer security prompt for Windows Installer scripts, Result=1, Recommended=0, Severity=Medium
[😺] ID 1752, Windows Logon Options: Sign-in and lock last interactive user automatically after a restart, Result=1, Severity=Passed
[😿] ID 1770, Windows Installer: Disable Co-Installer (USB AutoInstall), Result=, Recommended=1, Severity=Medium
[😿] ID 1753, WinRM Client: Allow Basic authentication, Result=1, Recommended=0, Severity=Medium
[😿] ID 1754, WinRM Client: Allow unencrypted traffic, Result=1, Recommended=0, Severity=Medium
[😿] ID 1755, WinRM Client: Disallow Digest authentication, Result=1, Recommended=0, Severity=Medium
[😿] ID 1756, WinRM Service: Allow remote server management through WinRM, Result=1, Recommended=0, Severity=Medium
[😿] ID 1757, WinRM Service: Allow Basic authentication, Result=1, Recommended=0, Severity=Medium
[😿] ID 1758, WinRM Service: Allow unencrypted traffic, Result=1, Recommended=0, Severity=Medium
[😿] ID 1759, WinRM Service: Disallow WinRM from storing RunAs credentials, Result=0, Recommended=1, Severity=Medium
[😿] ID 1760, Windows Remote Shell: Allow Remote Shell Access, Result=1, Recommended=0, Severity=Medium
[😺] ID 2000, File Explorer: Configure Windows Defender SmartScreen, Result=1, Severity=Passed
[😿] ID 2001, File Explorer: Configure Windows Defender SmartScreen to warn and prevent bypass, Result=Warn, Recommended=Block, Severity=Medium


[*] 8/30/2022 6:18:27 PM - Starting Category PowerShell
[😿] ID 2100, Turn on PowerShell Script Block Logging, Result=0, Recommended=1, Severity=Medium
[😼] ID 2101, Turn on PowerShell Script Block Logging (Invocation), Result=0, Recommended=1, Severity=Low
[😼] ID 2102, Turn on PowerShell Transcription, Result=0, Recommended=1, Severity=Low
[😿] ID 2103, Disable PowerShell version 2, Result=Enabled, Recommended=Disabled, Severity=Medium
[😿] ID 2104, Disable PowerShell version 2 (root), Result=, Recommended=Disabled, Severity=Medium


[*] 8/30/2022 6:18:28 PM - Starting Category MS Security Guide
[😿] ID 2200, LSA Protection, Result=, Recommended=1, Severity=Medium
[😼] ID 2201, Lsass.exe audit mode, Result=, Recommended=8, Severity=Low
[😿] ID 2202, NetBT NodeType configuration, Result=0, Recommended=2, Severity=Medium
[😺] ID 2203, WDigest Authentication, Result=0, Severity=Passed


[*] 8/30/2022 6:18:28 PM - Starting Category MSS (Legacy)
[😿] ID 2204, MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended), Result=0, Recommended=1, Severity=Medium
[😿] ID 2205, MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing), Result=, Recommended=2, Severity=Medium
[😿] ID 2206, MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing), Result=, Recommended=2, Severity=Medium
[😿] ID 2207, MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes, Result=, Recommended=0, Severity=Medium
[😿] ID 2208, MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers, Result=0, Recommended=1, Severity=Medium


[*] 8/30/2022 6:18:28 PM - Starting Category Microsoft Defender Antivirus
[😺] ID 1802, Cloud-delivered protection, Result=2, Severity=Passed
[😿] ID 1803, Automatic sample submission, Result=1, Recommended=2, Severity=Medium
[😿] ID 1804, Controlled folder access, Result=0, Recommended=1, Severity=Medium
[😺] ID 1805, Real time monitoring, Result=False, Severity=Passed


[*] 8/30/2022 6:18:28 PM - Starting Category Microsoft Defender Exploit Guard
[😿] ID 1950, Exploit protection: Control flow guard (CFG), Result=NOTSET, Recommended=ON, Severity=Medium
[😿] ID 1951, Exploit protection: Data Execution Prevention (DEP), Result=NOTSET, Recommended=ON, Severity=Medium
[😺] ID 1952, Exploit protection: Override Data Execution Prevention (DEP), Result=False, Severity=Passed
[😿] ID 1954, Exploit protection: Force randomization for images (Mandatory ASLR), Result=NOTSET, Recommended=ON, Severity=Medium
[😺] ID 1955, Exploit protection: Override force randomization for images (Mandatory ASLR), Result=False, Severity=Passed
[😿] ID 1956, Exploit protection: Randomize memory allocations (Bottom-up ASLR), Result=NOTSET, Recommended=ON, Severity=Medium
[😺] ID 1957, Exploit protection: Override randomize memory allocations (Bottom-up ASLR), Result=False, Severity=Passed
[😿] ID 1958, Exploit protection: High-entropy ASLR, Result=NOTSET, Recommended=ON, Severity=Medium
[😺] ID 1959, Exploit protection: Override high-entropy ASLR, Result=False, Severity=Passed
[😿] ID 1960, Exploit protection: Validate exception chains (SEHOP), Result=NOTSET, Recommended=ON, Severity=Medium
[😿] ID 1961, Exploit protection: Validate exception chains (SEHOP (Telemetry only), Result=NOTSET, Recommended=OFF, Severity=Medium
[😺] ID 1962, Exploit protection: Override validate exception chains (SEHOP), Result=False, Severity=Passed
[😿] ID 1963, Exploit protection: Validate heap integrity, Result=NOTSET, Recommended=ON, Severity=Medium
[😺] ID 1964, Exploit protection: Override validate heap integrity, Result=False, Severity=Passed
[😿] ID 1953, Force use of Data Execution Prevention (DEP), Result=OptIn, Recommended=AlwaysOn, Severity=Medium


[*] 8/30/2022 6:18:29 PM - Starting Category Windows Firewall
[😼] ID 2300, HardeningKitty-Block-TCP-NetBIOS, Result=, Recommended=True, Severity=Low
[😼] ID 2301, HardeningKitty-Block-TCP-RDP, Result=, Recommended=True, Severity=Low
[😼] ID 2302, HardeningKitty-Block-TCP-RPC, Result=, Recommended=True, Severity=Low
[😼] ID 2303, HardeningKitty-Block-TCP-SMB, Result=, Recommended=True, Severity=Low
[😼] ID 2304, HardeningKitty-Block-TCP-WinRM, Result=, Recommended=True, Severity=Low
[😼] ID 2305, HardeningKitty-Block-UDP-NetBIOS, Result=, Recommended=True, Severity=Low
[😼] ID 2306, HardeningKitty-Block-UDP-RPC, Result=, Recommended=True, Severity=Low
[😼] ID 2307, HardeningKitty-Block-calc-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2308, HardeningKitty-Block-calc-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2309, HardeningKitty-Block-certutil-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2310, HardeningKitty-Block-certutil-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2311, HardeningKitty-Block-conhost-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2312, HardeningKitty-Block-conhost-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2313, HardeningKitty-Block-cscript-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2314, HardeningKitty-Block-cscript-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2315, HardeningKitty-Block-mshta-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2316, HardeningKitty-Block-mshta-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2317, HardeningKitty-Block-notepad-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2318, HardeningKitty-Block-notepad-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2319, HardeningKitty-Block-RunScriptHelper-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2320, HardeningKitty-Block-RunScriptHelper-x86, Result=, Recommended=True, Severity=Low
[😼] ID 2321, HardeningKitty-Block-wscript-x64, Result=, Recommended=True, Severity=Low
[😼] ID 2322, HardeningKitty-Block-wscript-x86, Result=, Recommended=True, Severity=Low


[*] 8/30/2022 6:18:31 PM - HardeningKitty is done
[*] 8/30/2022 6:18:31 PM - Your HardeningKitty score is: 3.23. HardeningKitty Statistics: Total checks: 329 - Passed: 67, Low: 58, Medium: 203, High: 1.