Skip to content

v0.7.2

Choose a tag to compare

@Dicklesworthstone Dicklesworthstone released this 28 Jul 11:49

Windows hardening release built natively on Windows from commit 1bdcf2f.

Highlights:

  • Equivalent careful_company_running_windows protections for PowerShell and Cmd.
  • Direction-aware scp and pscp handling across direct invocations, Cmd wrappers, and statically resolvable PowerShell Start-Process forms.
  • Preserved legitimate downloads, internal destinations, local copies, named-remote Git pushes, and direct hfdt workflows.
  • Fixed Windows .NET Directory.Delete classification and explicit-dialect escape coverage.
  • Reduced cold-path regex initialization for transfer commands.

Native Windows validation: 349 of 349 E2E scenarios passed on a Surface Book, including destructive filesystem/database actions, outbound email/chat/upload/transfer/tunnel channels, guardrail tampering, Cmd caret escapes, and safe negative controls.

Pinned native install:

& ([scriptblock]::Create((irm "https://raw.githubusercontent.com/Dicklesworthstone/destructive_command_guard/main/install.ps1"))) -EasyMode -Verify -Version v0.7.2

Published dcg.exe SHA256:

8dab75c1cf197bfdb3934cd43d89717d6c1f0f6c7e4d66ae2bd3f8eda1aba18d

This emergency release publishes Windows x86_64 MSVC assets only. Homebrew remains pinned to the latest release with complete macOS and Linux artifacts.