What are the simplest hardening methods all companies should implement?

So, we had an incident where a Cobalt Strike Beacon was detected for one of our clients. The clean up was a serious mess, so much so that my MSP had to hire out a different company specializing in IR.

That said, the initial discovery was due to a credential dump on lsass.exe.

Afterwards, I, (an L1 Analyst) found that there was an extremely simple method to harden lsass.exe with minimal--if not 0--impact to business functioning: turning on LSA protection …

companies cybersecurity hardening