A 15-minute, license-free Windows 11 hardening checklist for SMB endpoints — TPM/Secure Boot, BitLocker, standard-user accounts, Defender + ASR rules, firewall, telemetry trim, and Recall opt-out.
Series: Lock It Down
Hardening checklists you can finish in one sitting.
Lock Down SSH in 10 Minutes: A Hardening Checklist for Linux
Key-only auth, no root, a non-default port, fail2ban, and a workflow that won’t lock you out — every box I run gets this same six-line hardening file.