Month: June 2025

try {# Create CSP parameters$cspParams = New-Object System.Security.Cryptography.CspParameters$cspParams.ProviderName = $CSPName$cspParams.ProviderType = 24 # PROV_RSA_AES$cspParams.KeyContainerName = $ContainerName if ($MachineKey) {$cspParams.Flags = [System.Security.Cryptography.CspProviderFlags]::UseMachineKeyStore} # Generate the key pair$rsa = New-Object System.Security.Cryptography.RSACryptoServiceProvider($KeySize, $cspParams) Write-Host “Key generated successfully!” -ForegroundColor GreenWrite-Host “Container Name: $ContainerName” -ForegroundColor YellowWrite-Host “Key Size: $KeySize bits” -ForegroundColor YellowWrite-Host “Machine Key: $MachineKey” -ForegroundColor YellowWrite-Host “Provider: $CSPName” -ForegroundColor Yellow # Clean up$rsa.Clear()$rsa.Dispose() return $ContainerName } catch {Write-Error “Failed to generate key: $($_.Exception.Message)”return $null}} # Generate the key$keyContainer = New-RSAKeyInCSP -KeySize 2048 -ContainerName “_DRMS:Mode2:MS-GUID:{xxxxxxxxxx}” -MachineKey $true

More info: https://rzetelnekursy.pl/stop-using-hardenkitty-windows-server-2025-security-baseline-is-the-clear-winner/

Securing your operating system is no longer optional—it’s a necessity in today’s threat landscape. The operating system (OS) acts as the backbone of your IT environment, connecting hardware and software, and controlling access to critical resources. A single misconfiguration or outdated setting can expose your entire organization to malware, ransomware, and unauthorized access. Benchmarks – the theory CIS Benchmarks: These are comprehensive, community-driven best practices for securely configuring a wide range of IT systems, including Windows Server. Each recommendation is accompanied by a rationale and step-by-step implementation guidance. Microsoft Security Benchmark: Microsoft’s own framework provides detailed controls and baselines. In real live we usually starting with not theory, but practice and the fastest way is starting from reporting. Reporting and Compliance Microsoft Guest Configuration Extension: This Azure tool allows you to audit and enforce configuration policies on your virtual machines, ensuring they remain compliant with your chosen security baseline. Microsoft Defender: With Defender Vulnerability Management, you can continuously assess your endpoints against CIS and STIG benchmarks, receive real-time compliance reports, and quickly identify drift or misconfigurations. But in that case we see only reporting, but lets start implementation the best practices. Implementation CIS Paid Version: Effective, but limited to GPO-based … Stop Using HardenKitty – Windows Server 2025 Security Baseline Is the Clear WinnerRead more

Get data Install Window Debuger . The best is to use Windows 11 for this. Launch WinDBG and open the downloaded memory.dmp. You do not need to add symbols server – just in the latest version it will be picked automatically. Execute the follwoing: You can put the results for any AI tool for the analyses. My last analyses ends with message: ******* 266688 kernel stack PTE allocations have failed ****** ******* 365226304 kernel stack growth attempts have failed ******