Basic Security somename Security Config 2021

[somename]

This is a quite insecure windows setup for gaming, filesharing and media consumption/creation, although I would like for it to become better in the future.
This setup will never reach good security, because of filesharing and light gaming, but it's not handling important personal data/transactions.
Work in progress, happy about feedback.

credits/thanks go to anupritaisno1, beerisgood-win10hardening, andy ful and more

 

[harlan4096]

Network firewall: firewall in Your router?

 

[CyberTech]

48 GB of ram? really? and Secure DNS means Google (8.8.8.8), Cloudflare (1.1.1.), etc

 

[somename]

Yes, 48 gigs of ram (2x16 + 2x8, same specs/manufacturer/name otherwise). I was running QubesOS previously. I don't have control over the router. I think of the network as hostile/compromised, so I don't care about not having control over the router.

 

[ZeePriest]

nice setup

 

[Digmor Crusher]

48 gigs, wow, why so much?

 

[harlan4096]

Periodic security scanners: You may add here some 3rd party tools such as EmsiSoft E. Kit, HitManPro...

Personal Files & Photos backup: You may use cloud services

Device recovery & backup: You may add here a full system back solution such as Macrium Reflect / AOMEI Backupper

 

[ForgottenSeer 85179]

I wouldn’t call this setup insecure.
compared to normal gaming setups, yours is very good

you can add NextDNS or Quad9 to your DNS settings for better security.

 

[somename]

48 gigs, wow, why so much?

Ram is cheap these days and I was using QubesOS before switching to Windows. When I built this pc, ram was expensive, so I went for 16gigs and added more later. Otherwise I would've gotten 32gb right away.
I am thinking about upgrading to Ryzen 3 for hardware shadow stack as well, but then I should probably invest some time into finding a decent motherboard. I'll proly wait.

Thanks for all the input