Skip to content

All OpSec guides

Windows Hardening Guide

Telemetry reduction and endpoint security for Windows: BitLocker, local accounts, Defender hardening and firewall lockdown for sovereignty-focused setups.

GuideOpSec

Windows baseline path
  1. 01
    Clean ISO
    Local account
  2. 02
    BitLocker
    Full-disk encrypt
  3. 03
    Telemetry cut
    Defender harden
  4. 04
    Firewall
    Endpoint rules

1. Factory Reset

  • Clean Windows installation from an official ISO.
  • Enable BitLocker.
  • Prefer a local account over a Microsoft account.

2. Core Hardening

Run the PowerShell hardening script and apply:

  • Telemetry and diagnostic data reduction
  • PowerShell and Defender hardening
  • Disable unnecessary services

3. Key Privacy Steps

  • Disable Cortana, OneDrive sync, and advertising ID
  • Use SimpleWall or advanced Windows Firewall rules
  • Enable Controlled Folder Access
  • Consider running Windows in a VM for high-risk tasks

Keep reading

Delta V Intel pipeline

Generated and verified through the Delta V intelligence system.

Explore IntelHub

Want high-signal intel like this in your inbox?

Get in touch