Windows hardening release built natively on Windows from commit 1bdcf2f.
Highlights:
- Equivalent careful_company_running_windows protections for PowerShell and Cmd.
- Direction-aware scp and pscp handling across direct invocations, Cmd wrappers, and statically resolvable PowerShell Start-Process forms.
- Preserved legitimate downloads, internal destinations, local copies, named-remote Git pushes, and direct hfdt workflows.
- Fixed Windows .NET Directory.Delete classification and explicit-dialect escape coverage.
- Reduced cold-path regex initialization for transfer commands.
Native Windows validation: 349 of 349 E2E scenarios passed on a Surface Book, including destructive filesystem/database actions, outbound email/chat/upload/transfer/tunnel channels, guardrail tampering, Cmd caret escapes, and safe negative controls.
Pinned native install:
& ([scriptblock]::Create((irm "https://raw.githubusercontent.com/Dicklesworthstone/destructive_command_guard/main/install.ps1"))) -EasyMode -Verify -Version v0.7.2
Published dcg.exe SHA256:
8dab75c1cf197bfdb3934cd43d89717d6c1f0f6c7e4d66ae2bd3f8eda1aba18d
This emergency release publishes Windows x86_64 MSVC assets only. Homebrew remains pinned to the latest release with complete macOS and Linux artifacts.