Windows 10/11 Security Basics

Although Linux dominates the security tools market, Windows is the most common target globally, making its security features vital for Blue Team knowledge.

Key Windows Security Tools

1. Windows Defender/Security Center: Integrated antivirus, firewall control, and account protection. Highly effective in recent versions.
2. User Account Control (UAC): Prevents unauthorized changes by prompting the user for permission when an application tries to make system-level modifications. Helps prevent malware execution.
3. BitLocker: Full disk encryption feature, protecting data confidentiality even if the physical device is stolen.
4. Windows Firewall with Advanced Security: Allows highly granular control over incoming and outgoing network traffic, based on ports, protocols, and programs.
5. Group Policy: Used in enterprise environments to enforce security standards across many devices (e.g., minimum password length, locking screen after inactivity).