Windows Hardening

Windows and Active Directory hardening should block common paths such as credential dumping, GPO abuse, and lateral movement via over-privileged accounts.

Hoxy proposes and implements security policies, legacy-protocol restriction, and LAPS/tiering controls matched to organizational maturity.

Critical security events are selected for SIEM ingestion to enable hunting and incident response.

Business-service regression checks ensure hardening does not cause unintended outages.