Content(add): Zoom hardening guide for opsec/endpoint by artemisclaw82 · Pull Request #375 · security-alliance/frameworks

artemisclaw82 · 2026-02-15T10:03:26Z

Summary

Adds a new Zoom hardening guide at docs/pages/opsec/endpoint/zoom-hardening.mdx and updates sidebar navigation.

Closes #135

What's included

Why Zoom is a target — ELUSIVE COMET attack pattern overview with link to the existing incident response playbook
Immediate hardening steps — Actionable checklist: disable remote control, restrict screen sharing, enable waiting rooms/passcodes, prefer browser-based Zoom
macOS-specific mitigations — tccutil commands, PPPC profiles for MDM/Jamf, uninstallation guidance. References Trail of Bits mitigation scripts
Organizational policies — Alternative platforms, browser-based Zoom enforcement, social engineering awareness training
Detection signals — Table of red flags during Zoom calls
Quick reference table — All settings with locations and recommended values

Files changed

docs/pages/opsec/endpoint/zoom-hardening.mdx — New page
vocs.config.ts — Added Zoom Hardening to Endpoint Security sidebar section (dev: true)

Template compliance

YAML frontmatter (title, description 140-160 chars, tags, contributors)
Key Takeaway (≤40 words)
Import paths correct
TagProvider/ContributeFooter structure
Sidebar entry with dev: true
Signed commit (GPG)

vercel · 2026-02-15T10:03:31Z

@artemisclaw82 is attempting to deploy a commit to the Security Alliance Team on Vercel.

A member of the Team first needs to authorize it.

artemisclaw82 · 2026-02-15T11:41:00Z

Disclosure: This content was written by Artemis, an AI assistant operated by @DicksonWu654. It has not yet been reviewed by a human. Dickson will review and revise before marking as ready for review.

Keeping as draft until that review is complete.

docs/pages/opsec/endpoint/zoom-hardening.mdx

vocs.config.ts

- Move zoom-hardening.mdx from opsec/endpoint/ to guides/endpoint_security/ - Update all settings paths to use Zoom web portal (zoom.us/profile/setting): - Remote control: Settings > Meeting > In Meeting (Basic) > Remote control - Screen sharing: Settings > Meeting > In Meeting (Basic) > Screen sharing - Waiting room: Settings > Meeting > Security > Waiting Room - Passcode: Settings > Meeting > Security > Require a passcode - Recording: Settings > Meeting > Recording > Automatic recording - Join before host: Settings > Meeting > Security - Update vocs.config.ts sidebar (guides section) - Revert opsec/endpoint to single Overview link Addresses review feedback on PR security-alliance#375.

github-actions · 2026-02-24T04:10:34Z

Sidebar Configuration Reminder

Documentation files update:

New in this push:

docs/pages/guides/endpoint\_security/index.mdx (added) ← NEW
docs/pages/guides/endpoint\_security/zoom-hardening.mdx (added) ← NEW

Please ensure that:

The sidebar in vocs.config.tsx has been updated to include these files
New content has the dev: true parameter so it's marked as under development
Sidebar links match the file paths - use the preview deployment to verify

See Contributing Guide – Sidebar & Navigation for more details.

_{This is an automated reminder. If this PR doesn't need sidebar changes, you can ignore this message.}

…Optional sections Required: Trail of Bits ELUSIVE COMET mitigations (disable remote control, host-only screen sharing, deny accessibility permissions, browser-based Zoom, SSO/OAuth, PPPC profiles/tccutil, remove desktop client). Optional: general best practices (waiting rooms, passcodes, auto-recording). Quick Reference table also split into Required/Optional subsections. Addresses review feedback on PR security-alliance#375.

docs/pages/guides/endpoint_security/zoom-hardening.mdx

…y-alliance#135) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

- Move zoom-hardening.mdx from opsec/endpoint/ to guides/endpoint_security/ - Update all settings paths to use Zoom web portal (zoom.us/profile/setting): - Remote control: Settings > Meeting > In Meeting (Basic) > Remote control - Screen sharing: Settings > Meeting > In Meeting (Basic) > Screen sharing - Waiting room: Settings > Meeting > Security > Waiting Room - Passcode: Settings > Meeting > Security > Require a passcode - Recording: Settings > Meeting > Recording > Automatic recording - Join before host: Settings > Meeting > Security - Update vocs.config.ts sidebar (guides section) - Revert opsec/endpoint to single Overview link Addresses review feedback on PR security-alliance#375.

…Optional sections Required: Trail of Bits ELUSIVE COMET mitigations (disable remote control, host-only screen sharing, deny accessibility permissions, browser-based Zoom, SSO/OAuth, PPPC profiles/tccutil, remove desktop client). Optional: general best practices (waiting rooms, passcodes, auto-recording). Quick Reference table also split into Required/Optional subsections. Addresses review feedback on PR security-alliance#375.

scode2277 · 2026-02-24T10:38:04Z

Hey @DicksonWu654, please do not use underscores to name files or folders, as they would cause troubles with many configs we have. Let's make our standard using dashes 🙏🏻

… paths)

github-actions · 2026-02-24T15:01:53Z

Sidebar Configuration Reminder

Documentation files update:

New in this push:

docs/pages/config/index.mdx (added) ← NEW
docs/pages/guides/endpoint-security/index.mdx (added) ← NEW
docs/pages/guides/endpoint-security/zoom-hardening.mdx (added) ← NEW

Please ensure that:

The sidebar in vocs.config.tsx has been updated to include these files
New content has the dev: true parameter so it's marked as under development
Sidebar links match the file paths - use the preview deployment to verify

See Contributing Guide – Sidebar & Navigation for more details.

_{This is an automated reminder. If this PR doesn't need sidebar changes, you can ignore this message.}

docs/pages/guides/endpoint-security/zoom-hardening.mdx

artemisclaw82

Deleted the Quick reference section (redundant tables that repeated settings already listed in the main content above). Further reading links preserved.

artemisclaw82

lgtm!

DicksonWu654

lgtm! Please undraft it now!

docs/pages/guides/index.mdx

scode2277 · 2026-03-02T11:01:52Z

Hey @DicksonWu654, left a little indication for the index file of the guides.
Also, in order to be able to merge this, if conversations are resolved, then mark them as is, as we can't merge if they are still open🙏🏻

Reverts manual modification to auto-generated file per reviewer feedback. The endpoint-security entry will be added by the index generator.

…tream The auto-generated index.mdx was regressing account-management back to account_management (underscores). Upstream already standardized on dashes.

artemisclaw82 force-pushed the content/zoom-hardening branch from cf24181 to 0f020db Compare February 15, 2026 11:37

artemisclaw82 marked this pull request as draft February 15, 2026 11:40

scode2277 requested a review from DicksonWu654 February 16, 2026 14:25

scode2277 added the content:add This issue or PR adds content or suggests to label Feb 16, 2026

DicksonWu654 suggested changes Feb 24, 2026

View reviewed changes

docs/pages/opsec/endpoint/zoom-hardening.mdx Outdated Show resolved Hide resolved

vocs.config.ts Outdated Show resolved Hide resolved

artemisclaw82 mentioned this pull request Feb 24, 2026

Content(add): Slack desktop client hardening guide #388

Closed

DicksonWu654 reviewed Feb 24, 2026

View reviewed changes

docs/pages/guides/endpoint_security/zoom-hardening.mdx Outdated Show resolved Hide resolved

artemisclaw82 and others added 4 commits February 24, 2026 05:23

content(add): Zoom hardening guide for opsec/endpoint (closes securit…

fa5e19b

…y-alliance#135) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docs(zoom-hardening): remove join-before-host + tighten language

2a7eeb2

artemisclaw82 force-pushed the content/zoom-hardening branch from 41ceeaa to 2a7eeb2 Compare February 24, 2026 05:24

fix: rename endpoint_security to endpoint-security (no underscores in…

acc4f28

… paths)

fix: remove unrelated index file changes from PR

2ee12fa

artemisclaw82 force-pushed the content/zoom-hardening branch from 0d13ef7 to 2ee12fa Compare February 25, 2026 04:17

DicksonWu654 suggested changes Mar 1, 2026

View reviewed changes

docs/pages/guides/endpoint-security/zoom-hardening.mdx Outdated Show resolved Hide resolved

chore: remove redundant quick reference section per review

cf325f0

artemisclaw82 commented Mar 1, 2026

View reviewed changes

artemisclaw82 requested a review from DicksonWu654 March 1, 2026 04:20

artemisclaw82 commented Mar 1, 2026

View reviewed changes

DicksonWu654 approved these changes Mar 1, 2026

View reviewed changes

artemisclaw82 marked this pull request as ready for review March 1, 2026 23:59

scode2277 reviewed Mar 2, 2026

View reviewed changes

docs/pages/guides/index.mdx Outdated Show resolved Hide resolved

artemisclaw82 added 2 commits March 2, 2026 22:16

fix: revert auto-generated guides/index.mdx to develop state

a01069f

Reverts manual modification to auto-generated file per reviewer feedback. The endpoint-security entry will be added by the index generator.

fix: use account-management (dashes) in guides/index.mdx to match ups…

88ce357

…tream The auto-generated index.mdx was regressing account-management back to account_management (underscores). Upstream already standardized on dashes.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Content(add): Zoom hardening guide for opsec/endpoint#375

Content(add): Zoom hardening guide for opsec/endpoint#375
artemisclaw82 wants to merge 9 commits intosecurity-alliance:developfrom
artemisclaw82:content/zoom-hardening

artemisclaw82 commented Feb 15, 2026 •

edited

Loading

Uh oh!

vercel bot commented Feb 15, 2026

Uh oh!

artemisclaw82 commented Feb 15, 2026

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Feb 24, 2026

Uh oh!

Uh oh!

scode2277 commented Feb 24, 2026

Uh oh!

github-actions bot commented Feb 24, 2026

Uh oh!

Uh oh!

artemisclaw82 left a comment

Uh oh!

artemisclaw82 left a comment

Uh oh!

DicksonWu654 left a comment

Uh oh!

Uh oh!

scode2277 commented Mar 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

artemisclaw82 commented Feb 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

What's included

Files changed

Template compliance

Uh oh!

vercel bot commented Feb 15, 2026

Uh oh!

artemisclaw82 commented Feb 15, 2026

Uh oh!

Uh oh!

Uh oh!

github-actions bot commented Feb 24, 2026

Sidebar Configuration Reminder

Uh oh!

Uh oh!

scode2277 commented Feb 24, 2026

Uh oh!

github-actions bot commented Feb 24, 2026

Sidebar Configuration Reminder

Uh oh!

Uh oh!

artemisclaw82 left a comment

Choose a reason for hiding this comment

Uh oh!

artemisclaw82 left a comment

Choose a reason for hiding this comment

Uh oh!

DicksonWu654 left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

scode2277 commented Mar 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

artemisclaw82 commented Feb 15, 2026 •

edited

Loading