Essential Eight mitigation strategy for hardening web browsers, Microsoft Office, PDF software and PowerShell, from blocking Java and ads at ML1 to removing legacy frameworks and constraining PowerShell at ML3.
User application hardening at Maturity Level One: browsers do not process Java or web advertisements from the internet, Internet Explorer 11 is disabled or removed, and users cannot change browser security settings.
User application hardening at Maturity Level Two: browsers, Office and PDF software hardened to ASD and vendor guidance, Office blocked from child processes, executable content and code injection, locked settings, and central PowerShell and command line logging.
User application hardening at Maturity Level Three: .NET Framework 3.5 and Windows PowerShell 2.0 disabled or removed, and PowerShell restricted to Constrained Language Mode.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.