Basic Security Allego's Laptop Security Config 2025

[Allego]

I posted my first security config in 2019. I'm unable to edit/update it because it was already in archived due for not updating it for 5 years lol so I need to make a new one. Any suggestions are welcome. Thank you!

 

[Kongo]

Nice config! Tho you don't need to enable LOLBins + recommended as H_c recommended is just a smaller collection of all the LOLBins.

 

[Allego]

Nice config! Tho you don't need to enable LOLBins + recommended as H_c recommended is just a smaller collection of all the LOLBins.

Okay thanks for letting me know. Though I did clicked both so far no problems. Anyway, I don't use MS Office but I use LibreOffice. Do I need to "add rule" all of its .exe files or just leave it?

 

[Kongo]

Okay thanks for letting me know. Though I did clicked both so far no problems. Anyway, I don't use MS Office but I use LibreOffice. Do I need to "add rule" all of its .exe files or just leave it?

Simply click on "add LOLBins" and you are good to go. The rest like Adobe, MS Office rules are only necessary if you actually use the software

 

[harlan4096]

I would:

* Set UAC to Always Notify.
* Periodic malware scanners: add any 3rd party second Opinion Scanner would be welcome.
* System recovery: a full image system backup solution would be welcome also here.

Thanks for sharing

 

[Allego]

I would:

* Set UAC to Always Notify.
* Periodic malware scanners: add any 3rd party second Opinion Scanner would be welcome.
* System recovery: a full image system backup solution would be welcome also here.

Thanks for sharing

I will just leave the UAC to its default and won't add a second opinion scanner because I won't add anymore apps in this system. Just the browser, real-time security, password manager, vpn, firewall hardening tool, o&o shutup, and Libre Office. If my curiosity kicks in, I'll just fire up the Windows Sandbox or Hyper-V and visit the website there. I did make a system recovery though using the Windows create recovery drive feature into my flash drive

 

[Kongo]

I will just leave the UAC to its default and won't add a second opinion scanner because I won't add anymore apps in this system. Just the browser, real-time security, password manager, vpn, firewall hardening tool, o&o shutup, and Libre Office. If my curiosity kicks in, I'll just fire up the Windows Sandbox or Hyper-V and visit the website there. I did make a system recovery though using the Windows create recovery drive feature into my flash drive

May I ask how you managed to get Crowdstrike? And how is it running on your system?

 

[Allego]

May I ask how you managed to get Crowdstrike? And how is it running on your system?

I got it through Amazon for $39 per license. It feels light in the system. Even though I turned all the settings and put the protection level to Aggressive/Moderate. It reminds of Panda Cloud when I used it years ago.

 

[Allego]

Some small changes
Changed Adware & PUP Prevention Level to Aggressive
Changed USB Policy for Mass Storage from read, write, and execute to read and write.
Used AppLocker to block .exe, msi, and script files in Downloads folder from executing

 

[Allego]

Okay so after some testing, I changed all the prevention levels from moderate to aggressive and I didn't feel any performance impact. So it's all good
This probably the last time I'll mess with the settings until they introduce new features or until I discover some again 'cause I'm still exploring and learning about their console

 

[Allego]

NextDNS subscription was up and went to ControlD. Almost the same speed at least in my area. So far so good

 

[Allego]

Done dealing with False Positives. Changed my DNS to Cloudflare Gateway.

 

[Allego]

My Crowdstrike Falcon Go subscription almost expire and won't renew since they started now to require business email to buy from Amazon. My plan right now is to limit the use of 3rd party apps as possible and use the built-in features of Windows 11 Pro.

 

[oldschool]

My plan right now is to limit the use of 3rd party apps as possible and use the built-in features of Windows 11 Pro.

That's a good plan, my friend!