We currently use WinVerifyTrust to validate in-binary Authenticode signatures, but this doesn't work for externally signed binaries (i.e., those that come with a separate .cat file). Many core WIndows binaries are signed externally, so we should support this case.
Fully Optimize, Harden, and Debloat Windows 10 and Windows 11 Deployments to Windows Best Practices and DoD STIG/SRG Requirements. The ultimate Windows 10 & 11 security and privacy script!
Fully-featured tool that combines state-of-the-art TLS analyzers with a report system that suggests appropriate mitigations and shows the full set of viable attacks.
We currently use
WinVerifyTrustto validate in-binary Authenticode signatures, but this doesn't work for externally signed binaries (i.e., those that come with a separate.catfile). Many core WIndows binaries are signed externally, so we should support this case.Some initial research: