In the defensive security space there is also Kicksecure[0], which serves as the base for Whonix (a hardened linux distro that tries to provide strong privacy/anonymity via the Tor network). They have a wiki that goes over the desktop hardening features and tweaks that go into it.