Security of Windows environments in enterprise and critical infrastructure contexts, including Active Directory hardening, Group Policy, Microsoft patch management, endpoint protection on Windows workstations and servers, secure configuration of services like SMB, RDP, WinRM, PowerShell security, advanced audit logging, Credential Guard, AppLocker, Windows Defender Application Control, and mitigation of attack techniques specific to the Microsoft ecosystem such as pass-the-hash, Kerberoasting, NTLM relay, and privilege escalation via token manipulation.