Mondoo

• Set Restore files and directories rights
• Enable Secure Boot integrity validation
• LAPS AdmPwd GPO Extension / CSE
• Enable Require user auth using NLA
• Enable and Set Password Complexity
• LAN Manager auth level NTLMv2
• Enable SEHOP
• Enable Local Admin Password Mgmt
• Do not allow passwords to be saved
• Disable Configure SMB v1 server
• Disable SMB v1 client driver