API tools faq
paste
7OVO7

Untitled

7OVO7
May 14th, 2025
117
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.42 KB | None | 0 0
raw download clone embed print report
  1.  
  2. # SETUP SCRIPS EXECUTIONPOLICY
  3. Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser
  4. Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope LocalMachine
  5.  
  6. # --- ENABLE DEP FOR ALL APPS AND SERVICES
  7. #bcdedit /set nx AlwaysOn
  8.  
  9. # DISABLE HIBERNATION
  10. powercfg /hibernate off
  11.  
  12. # DISABLE SOSPENSION TIMEOUT AC & DC
  13. powercfg /change standby-timeout-ac 0
  14. powercfg /change standby-timeout-dc 0
  15.  
  16. # DISABLE HYBRID STANDBY
  17. powercfg /setacvalueindex SCHEME_CURRENT SUB_SLEEP HybridSleep 0
  18. powercfg /setdcvalueindex SCHEME_CURRENT SUB_SLEEP HybridSleep 0
  19.  
  20. # DISABLE STANDBY
  21. powercfg /setacvalueindex SCHEME_CURRENT SUB_SLEEP STANDBYIDLE 0
  22. powercfg /setdcvalueindex SCHEME_CURRENT SUB_SLEEP STANDBYIDLE 0
  23.  
  24. # DISABLE POWERSHELL REMOTING
  25. Disable-PSRemoting -Force; Stop-Service -Name WinRM; Set-Service -Name WinRM -StartupType Disabled
  26.  
  27. # FIREWALL PORTS MITIGATION (enable)
  28. New-NetFirewallRule -DisplayName "135 (MS RPC)" -Direction Inbound -Protocol TCP -LocalPort 135 -Action Block -Group "TOVOT"
  29. New-NetFirewallRule -DisplayName "445 (SMB)" -Direction Inbound -Protocol TCP -LocalPort 445 -Action Block -Group "TOVOT"
  30. New-NetFirewallRule -DisplayName "137 (NetBIOS Name Service)" -Direction Inbound -Protocol TCP -LocalPort 137 -Action Block -Group "TOVOT"
  31. New-NetFirewallRule -DisplayName "138 (NetBIOS Datagram Service)" -Direction Inbound -Protocol TCP -LocalPort 138 -Action Block -Group "TOVOT"
  32. New-NetFirewallRule -DisplayName "139 (NetBIOS Session Service)" -Direction Inbound -Protocol TCP -LocalPort 139 -Action Block -Group "TOVOT"
  33. New-NetFirewallRule -DisplayName "1900 (SSDP)" -Direction Inbound -Protocol UDP -LocalPort 1900 -Action Block -Group "TOVOT"
  34. New-NetFirewallRule -DisplayName "5353 (mDNS)" -Direction Inbound -Protocol UDP -LocalPort 5353 -Action Block -Group "TOVOT"
  35. New-NetFirewallRule -DisplayName "500 (IPSec)" -Direction Inbound -Protocol UDP -LocalPort 500 -Action Block -Group "TOVOT"
  36. New-NetFirewallRule -DisplayName "4500 (IPSec NAT-T)" -Direction Inbound -Protocol UDP -LocalPort 4500 -Action Block -Group "TOVOT"
  37. New-NetFirewallRule -DisplayName "3389 (RDP)" -Direction Inbound -Protocol TCP -LocalPort 3389 -Action Block -Group "TOVOT"
  38. New-NetFirewallRule -DisplayName "5985 (WinRM HTTP)" -Direction Inbound -Protocol TCP -LocalPort 5985 -Action Block -Group "TOVOT"
  39. New-NetFirewallRule -DisplayName "5986 (WinRM HTTPS)" -Direction Inbound -Protocol TCP -LocalPort 5986 -Action Block -Group "TOVOT"
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!