via Security Hacks from some time ago, I see that Core Security have a free Windows security package.
I haven't tried it out yet - not enough round tuits in the couple of months since I saw it - but I definitely intend to, particularly the port of pf.