BitLocker & Boot Security
BitLocker hardening: XTS-AES 256, TPM+PIN, key escrow
Configure BitLocker for real-world threats: encryption method, TPM-only vs TPM+PIN, recovery key escrow to AD or Entra ID, Secure Boot, DMA protection and fleet verification.
Intermediate