4 Free Easy Wins That Make Red Teams Harder

This post provides practical, actionable Windows hardening recommendations using Group Policy: disable or restrict Office macros (including signing requirements), reassign risky file extensions to non-executable handlers, deny local administrator network logons, and enable LSA protection; it also recommends Microsoft security baselines and application whitelisting as broader mitigations.