Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

Directory Services Internals (DSInternals) PowerShell Module and Framework

macOS: mount any linux-supported filesystem read/write using NFS and a microVM

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

Forensics tool for NTFS (parser, mft, bitlocker, deleted files)

A list of public attacks on BitLocker

A system administration or post-exploitation script to automatically extract the bitlocker recovery keys from a domain.

Framework to join Linux's physical security bricks.

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.

Cryptsetup backup upstream repository https://gitlab.com/cryptsetup/cryptsetup

bitpixie Proof of Concept - Bitlocker Decryptor

Configuration guidance for implementing BitLocker. #nsacyber

Bitpixie exploitation PoC

Managing BitLocker from WinPE Environment

Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.

Powershell script collection by Fabian Niesen InfrastrukturHelden.de. The following applies to all scripts: Use at your own risk and without any guarantee! The scripts that have a header with versioning are usually more mature. Others are sometimes just practical code snippets that I can access better this way.

vCrypt2Go – Lock-and-Unlock Utilities for VeraCrypt Portable

This DSC module allows you to configure Bitlocker on a single disk, configure a TPM chip, or automatically enable Bitlocker on multiple disks.

TMP/LUKS enabled linux initramfs

This repository is used for all my various public PowerShell scripts.

Various tools i created for my own use

The Porygon-Z that's super effective against Secure Boot! (CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, and more...)

Crypto-erase tool for BitLocker volumes

A comprehensive Zero-Trust security auditing framework for Windows, automating system, network, and policy checks with advanced threat detection, reporting, and remediation guidance.

The MBAM Test Automation Package gives you the ability to get an overview about the availability and the security status of your Microsoft Bitlocker Administration and Monitoring (MBAM) system. You can easily create HTML-reports, even on a regulary basis. Or test specific components and security issues of your system.

Create a drive context menu entry to lock an unlocked BitLocker encrypted drive

Java Network Key Protector Unlocker (for Bitlocker Network Unlock)

反警方非法暴力取证的Win11安全加固策略 （Win11 Security Hardening Strategy Against Illegal Police Coercive Interrogation）

PowerShell scripts designed to manage BitLocker key backup to Azure Active Directory (AAD) using Microsoft Intune's "Remediations"feature.

Volatility 3 plugin for extracting BitLocker Full Volume Encryption Keys (FVEK)