Tools
Software I build and maintain in the open. MIT licensed unless stated.
Win11-Security-Optimizer
A Windows 11 security tool with a GUI for people who own the machine but do not live in PowerShell. It audits and hardens security settings, removes preinstalled apps, checks for signs of compromise and manages startup items. It runs from a batch file on the PowerShell 5.1 that ships with Windows, so there is no installer and no unsigned binary for SmartScreen to quarantine.
The design rule is that nothing changes without a tick and a confirmation, and everything that changes can be undone. Before the first change it creates a System Restore point. Every change writes its before-state to a JSON backup and appends an undo step to a rollback script. Each fix is re-read after it is applied to confirm it took effect.
| Area: | What it does: |
|---|---|
| Security | Audits firewall, Defender, SmartScreen, UAC, SMBv1, LLMNR, AutoRun, RDP and more. Fixes are tiered Safe, Elevated, High-risk or Audit-only. |
| Investigate | Hidden admins, backdoor accounts, persistence, exposed remote access, Defender exclusions and hosts-file tampering, in plain English. |
| Deep Scan | Native process and event-log hunt: masquerading binaries, encoded PowerShell, download cradles, LOLBin abuse, log clearing. |
| Pro Tools | Opt-in Hayabusa and Chainsaw, downloaded on consent from official releases and verified against a pinned SHA-256. |
| Debloat and startup | Ticked removal of consumer apps with reinstall notes; reversible startup toggles that rename rather than delete. |