#Hardening
All CosmicBytez Labs articles tagged #Hardening, across news, security advisories, how-to guides, and projects.
- News
Named Pipes Under Attack: Securing Windows Interprocess Communication
Weak access controls on Windows named pipes let untrusted processes reach privileged services. Here's how endpoint verification and strict ACLs help.
- HOWTO
OpenSSH Hardening with Certificate-Based Authentication
Replace static SSH keys with a short-lived certificate authority. Harden sshd_config, eliminate lateral-movement risk, and enforce zero-trust access...
- HOWTO
AIDE File Integrity Monitoring: Detect Unauthorized Changes on Linux
Deploy AIDE (Advanced Intrusion Detection Environment) to build a cryptographic baseline of your Linux filesystem and automatically alert on unauthorized...
- HOWTO
Nginx + ModSecurity WAF: Protecting Web Apps with OWASP CRS
Deploy ModSecurity v3 as an Nginx module, wire in the OWASP Core Rule Set, tune false positives, and verify SQL injection and XSS are blocked — all on a...
- HOWTO
Lynis: Linux Security Auditing and Hardening in Practice
Learn how to use Lynis to audit, score, and harden Linux systems. Covers installation, scan interpretation, automated reporting, and CI integration for...
- HOWTO
Domain Controller Hardening: Securing Active Directory
Comprehensive DC hardening guide covering tier model implementation, LDAP signing, NTLM restrictions, Kerberos hardening, AdminSDHolder, DSRM security,...
- HOWTO
FortiGate Security Hardening: Best Practices for Enterprise
Complete FortiGate hardening guide covering admin access lockdown, firmware management, interface hardening, DNS/NTP security, certificate management,...
- HOWTO
Windows Server Hardening: A Complete Security Guide for Enterprises
Step-by-step Windows Server hardening covering CIS benchmarks, attack surface reduction, service hardening, firewall rules, credential protection, and...
- Checklist
Server Hardening Security Checklist
Comprehensive checklist for hardening Linux and Windows servers before production deployment. Covers OS configuration, network security, access controls,...
- HOWTO
Group Policy Security Hardening for Windows Environments
Implement CIS-aligned security baselines through Group Policy including password policies, account lockout, audit policies, restricted groups, AppLocker,...
- HOWTO
Security Baseline Hardening: CIS Controls Implementation
Implement CIS Critical Security Controls for enterprise security. Covers IG1/IG2/IG3 controls mapping, implementation priorities, and tooling recommendations.
- HOWTO
SSH Hardening Best Practices
Secure your SSH servers with essential hardening techniques including key-based authentication, fail2ban configuration, and advanced security measures.
- HOWTO
WireGuard VPN Setup and Security Hardening on Linux
Deploy a hardened WireGuard VPN server on Linux — key generation, server and client config, firewall rules, and security best practices for production use.
- HOWTO
Windows Security Baseline Audit: CIS Benchmark Compliance
Automate Windows security baseline checks using PowerShell. Validate configurations against CIS benchmarks for password policies, audit settings, and...