{"id":51186035,"url":"https://github.com/tcdoverlord/powershell-network-hardening-bootstrap","last_synced_at":"2026-06-27T10:02:24.187Z","repository":{"id":365791270,"uuid":"1259560886","full_name":"tcdoverlord/powershell-network-hardening-bootstrap","owner":"tcdoverlord","description":"PowerShell-based Windows security hardening and network monitoring toolkit featuring firewall enforcement, alerting, configurable whitelisting, and activity logging.","archived":false,"fork":false,"pushed_at":"2026-06-18T22:23:33.000Z","size":1052,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-18T23:23:01.367Z","etag":null,"topics":["automation","cybersecurity","firewall","network-monitoring","powershell","sysadmin","system-hardening","windows"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tcdoverlord.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-06-04T16:20:03.000Z","updated_at":"2026-06-18T22:23:36.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/tcdoverlord/powershell-network-hardening-bootstrap","commit_stats":null,"previous_names":["tcdoverlord/powershell-network-hardening-bootstrap"],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/tcdoverlord/powershell-network-hardening-bootstrap","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tcdoverlord%2Fpowershell-network-hardening-bootstrap","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tcdoverlord%2Fpowershell-network-hardening-bootstrap/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tcdoverlord%2Fpowershell-network-hardening-bootstrap/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tcdoverlord%2Fpowershell-network-hardening-bootstrap/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tcdoverlord","download_url":"https://codeload.github.com/tcdoverlord/powershell-network-hardening-bootstrap/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tcdoverlord%2Fpowershell-network-hardening-bootstrap/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34848932,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-27T02:00:06.362Z","response_time":126,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","cybersecurity","firewall","network-monitoring","powershell","sysadmin","system-hardening","windows"],"created_at":"2026-06-27T10:02:23.595Z","updated_at":"2026-06-27T10:02:24.182Z","avatar_url":"https://github.com/tcdoverlord.png","language":"PowerShell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# PowerShell Network Hardening Bootstrap (Bootstrap System)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"assets/architecture.png\" alt=\"PowerShell Network Hardening Bootstrap Architecture Demo\" /\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://img.shields.io/badge/PowerShell-Bootstrap-blue?style=for-the-badge\u0026logo=powershell\" /\u003e\n  \u003cimg src=\"https://img.shields.io/badge/Windows-Network%20Hardening-0078D6?style=for-the-badge\u0026logo=windows\" /\u003e\n  \u003cimg src=\"https://img.shields.io/badge/System-Unpacker-orange?style=for-the-badge\" /\u003e\n  \u003cimg src=\"https://img.shields.io/badge/Status-Safety--First-green?style=for-the-badge\" /\u003e\n\u003c/p\u003e\n\n---\n\n# Important Concept\n\nPowerShell Network Hardening Bootstrap is a bootstrap / unpacker engine. You run one setup script, choose where to install, and it generates the complete Windows network monitoring and hardening runtime.\n\nThe bootstrap is for installation. The generated runtime scripts are for daily use.\n\n---\n\n# Only Entry File\n\n```powershell\n.\\PowerShell_Network_Hardening_Bootstrap_Setup.ps1\n```\n\nThe bootstrap:\n\n- Asks where to install the toolkit.\n- Blocks unsafe Windows system install locations.\n- Unpacks the complete runtime payload.\n- Generates config, folders, scripts, logs, backups, and runtime docs.\n- Validates generated PowerShell and JSON files.\n- Fails clearly if generation fails.\n- Prints the launch command when complete.\n\n---\n\n# Generated System\n\nDefault install path:\n\n```text\nC:\\PowerShell-Network-Hardening-Bootstrap\\\n|-- Launch-Toolkit.bat\n|-- Start-ToolkitMenu.ps1\n|-- Bootstrap-WindowsHardeningToolkit.ps1\n|-- Start-WindowsHardeningToolkit.ps1\n|-- Restore-WindowsHardeningToolkit.ps1\n|-- monitor-config.json\n|-- README.md\n|-- LICENSE\n|-- Backup\\\n`-- Logs\\\n```\n\n---\n\n# Installation\n\nOpen PowerShell:\n\n```powershell\ncd \u003cREPO_FOLDER\u003e\n.\\PowerShell_Network_Hardening_Bootstrap_Setup.ps1\n```\n\nFollow the prompt to choose the install folder.\n\n---\n\n# Daily Operation\n\nDouble-click in the generated folder:\n\n```text\nLaunch-Toolkit.bat\n```\n\nOr open PowerShell as Administrator:\n\n```powershell\ncd C:\\PowerShell-Network-Hardening-Bootstrap\n.\\Start-ToolkitMenu.ps1\n```\n\nThat opens the runtime menu:\n\n```text\n1. Start monitor-only mode\n2. Preview safe hardening changes\n3. Apply safe firewall baseline\n4. Restore latest backup\n5. Open logs folder\n6. Run safety check\n7. Exit\n```\n\n---\n\n# Direct Commands\n\nStart monitoring without the menu:\n\n```powershell\n.\\Bootstrap-WindowsHardeningToolkit.ps1\n```\n\nPreview hardening without changing anything:\n\n```powershell\n.\\Start-WindowsHardeningToolkit.ps1 -ApplyHardening -WhatIf\n```\n\nApply the safe firewall baseline:\n\n```powershell\n.\\Bootstrap-WindowsHardeningToolkit.ps1 -ApplyHardening\n```\n\nRestore latest saved firewall state:\n\n```powershell\n.\\Restore-WindowsHardeningToolkit.ps1\n```\n\n---\n\n# Runtime Output\n\n```text\nC:\\PowerShell-Network-Hardening-Bootstrap\\Logs\\\nC:\\PowerShell-Network-Hardening-Bootstrap\\Backup\\\n```\n\nLogs track monitoring events and kill-switch exits. Backup stores restore points created before firewall changes.\n\n---\n\n# Safety Layer\n\n- Admin expected for hardening and restore actions.\n- Monitor-only is the default behavior.\n- Hardening is opt-in from the menu.\n- No UPnP/service-disabling actions are included.\n- No force override exists.\n- Hardening stops when VM, WSL, Docker, VPN-style adapters, or virtual networking indicators are detected.\n- Runtime monitoring exits if a VM, WSL, or Docker workload starts.\n- Restore points are created before firewall changes.\n\n---\n\n# Status\n\nSafety-First Bootstrap System v1.0\n\n---\n\n# Author\n\nTCDOverLord\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftcdoverlord%2Fpowershell-network-hardening-bootstrap","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftcdoverlord%2Fpowershell-network-hardening-bootstrap","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftcdoverlord%2Fpowershell-network-hardening-bootstrap/lists"}