Win11 24H2 Low-Bandwidth Hardening Suite (v2.8)
DEPLOYEDFive-layer defense-in-depth provisioning framework engineered for unattended enterprise endpoints operating over ultra-constrained cellular and satellite WAN links (< 100 MB/month OS background target).
- Automated BIOS serial hostname standardization, headless WinRE boot suppression, and Fast Startup lockdown.
- Event-driven USB RNDIS/NCM tether guard locking xHCI/WDF/WMI sleep states and enforcing deterministic interface metrics.
- Gated 3-minute network keepalive and self-heal adapter watchdog that automatically yields on satellite-only links.