Hardening with Enterprise/Domain joined workstation

[ideleon007]

So,
I have several newbie questions:
hardening the Windows OS with hardeningKitty would be to download, install and running the
Invoke-HardeningKitty from a powershell prompt.

• Is there documentation on the different options audit, GPO, Config or HailMary?
  To invoke changes, we would run the installation and Invoke-HardenKitty with one of those options?

---

• After running:
  Invoke-HardeningKitty -Filter { $.Severity -eq "Medium" }
  Invoke-HardeningKitty -Filter { $.Severity -eq "Low" }
  Invoke-HardeningKitty -Filter { $_.Severity -eq "High" }

I ran another Audit,
Invoke-HardeningKitty -Mode Audit -Log -Report

It created the report, but continued to have the same vulnerabilities.
The PS Console was run as Administrator.

Are there best options for a machine that is joined to a Domain and running the Enterprise version
of Windows 10 22H2??

any clarifications appreciated...

[ideleon007]

I think I figured it out...