Hardening Powershell /cmd Scripts to deploy from something like intune
Caution: Some scripts may brick your environment, review carefully
Requires admin as registry changes
Scripts are not signed
Write-Host is not applicable in intune scenario
May need to comment in/out the "New-Item" if the key does not exist/Does already exist
Some of this would be better done with GPO/Intune but if not applicable can use powershell script (e.g. LSA Protection)
Could even be deployed from Live Response (MDE) if unsigned powershell scripts are allowed as post compromise remediation
Pull Requests Welcome