Security setup

sirius777
PC setupWindows 10

sirius777's PC Security Config

sirius777 ·
Go to thread
Layout

Imported from an earlier discussion · awaiting owner confirmation

Showcase only — no advice requestedRevision 1What changed
Community rating Not rated yet
Staff assessment Advanced Plus Security

Earlier staff assessment. The reviewer, date and configuration version were not recorded. It has not been verified against the current Hub setup.

Assessment history
Device & operating system1
Operating system
Windows 10
Protection & updates7
Real-time protection
Microsoft Defender
Device firewall
Microsoft Defender Firewall
Security updates
Allow security updates
User Account Control (UAC)
Always notify
Custom security settings
  • Simple Windows Hardening
  • Configure Defender > HIGH
  • Controlled folder access (ransomware protection)
  • Firewall Hardening > LOLBins + Recommended H_C
  • Enabled block at first sight via Local Group Policy Editor
  • Enabled network protection
  • Disabled Windows Script Host
  • Microsoft Defender > sandbox
  • Enabled Secure Boot
Periodic malware scanners
Microsoft Defender Offline Scan
Kaspersky Virus Removal Tool
Emsisoft Emergency Kit
Malware sample testing
I do not participate in malware testing
Browser & privacy4
Browsers and extensions
  • Browsers:
    • Microsoft Edge
    • Google Chrome
    • Brave
    • Firefox

  • Extensions:
    • uBlock Origin > Advanced user, Prevent WebRTC from leaking local IP addresses, Block CSP reports, Disable JavaScript, Block remote fonts, blocked 3rd party frames, blocked 3rd-party (hard mode), and custom rules.
    • Facebook Container (Firefox only)

  • Chrome, Edge, and Brave flags:
    • #strict-origin-isolation

  • Microsoft Edge additional settings:
    • Microsoft Defender SmartScreen
    • Block potentially unwanted apps
    • Tracking protection > balanced
    • Secure DNS

  • Google Chrome additional settings:
    • Enhanced protection
    • Secure DNS

  • Brave additional settings:
    • Secure DNS
    • Clear browsing data on exit

  • Firefox additional settings:
    • Tracking protection > strict
    • Secure DNS

  • Custom exploit protection settings for browsers:
    • Block low integrity images - ON
    • Block remote images - ON
    • Block untrusted fonts - ON
    • Code integrity guard - ON (Also allow loading of images signed by Microsoft Store) ----> only for Microsoft Edge
    • Control flow guard (CFG) - ON
    • Data execution prevention (DEP) - ON + Enable trunk emulation
    • Disable extension points - ON
    • Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images
    • Randomize memory allocations (Bottom-up ASLR) - ON + Don't use high entropy
    • Validate exception chains (SEHOP) - ON
    • Validate handle usage - ON
    • Validate heap integrity - ON
    • Validate image dependency integrity - ON
Secure DNS
Microsoft Edge, Firefox, and Brave: Cloudflare
Google Chrome: Google DNS
Desktop VPN
Windscribe
Password and passkey manager
KeePass portable and KeePassXC
Backup & recovery2
File and photo backups
  • External hard drive (copy and paste)
  • AOMEI Backupper Pro
  • Google Drive
  • Mega
System recovery
AOMEI Backupper Pro
Device & usage4
Main use of this computer
For home and private use
Maintenance tools
  • Samsung Magician
  • Storage Sense
Computer specs
Device: ASUS A455L
CPU: Intel Core i5-5200U (2.7GHz)
GPU: GeForce 930m
RAM: 8GB
Storage: 250GB SAMSUNG 860 EVO SSD
Notable changes
Not much has changed since 2021.

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

Not rated yet
An open invitation for useful feedback.

Sign in to rate this setup

Shared by the member. This is a configuration record, not a device scan.

Comments and feedback belong in the forum discussion. Open it to join the conversation.

Back
Top