Advanced Plus Security Andrew3000's Security Config 2023

Thread starter Andrew3000
Start date Apr 5, 2022

Last updated: Jan 15, 2023

How it's used?: For home and private use

Operating system: Windows 11

On-device encryption: BitLocker Device Encryption for Windows

Log-in security

- Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)

Security updates: Allow security updates and latest features

User Access Control: Always notify

Smart App Control: Off

Network firewall: Enabled

Real-time security: Kaspersky Total Security—Tweaked

Firewall security

About custom security: Kaspersky:
Unknown App: High restricted (also connection to internet blocked)
Application started before kaspersky: High restricted (also connection to internet blocked)
Trust digitally signed application: Disabled
KSN Rules: Enabled
Custom Folder Access Rules (permission, protecting folders, permissions of apps etc…)
Custom Firewall Rules
Others custom KTS settings

Others:
Hard_Configurator by Andy Ful

Periodic malware scanners: Norton Power Eraser, HitmanPRO, MBAM - AdwCleaner.

Malware sample testing: I do participate in malware testing. See details about my testing environment below.

Browser(s) and extensions: uBlock Origin, Bitwarden, LanguageTool, Trocker

Secure DNS: NextDNS

Desktop VPN: PIA/Express VPN

Password manager: KeePassXC with 64 chars length.

Maintenance tools: Kerish Doctor, WiseCare 365

File and Photo backup: Documents Backup with Macrium Reflect + @MaxSyncUP to push the backup to Google Drive.
Only Encrypted Backups.

System recovery: Full Image Backup with Macrium Reflect using 3-2-1 rule + @MaxSyncUP to push the backup to Google Drive.
Only Encrypted Backups.
1 Daily Backup
1 Backup every hour

Risk factors

- Browsing to popular websites
- Browsing to unknown / untrusted / shady sites
- Browsing the dark web
- Working from home
- Opening email attachments
- Buying from online stores, entering banks card details
- Logging into my bank account
- Downloading software and files from reputable sites
- Downloading software and files from unknown / untrusted / shady sites
- Sharing and receiving files and torrents
- Requesting and accepting remote access
- Gaming
- Streaming audio/video content from trusted sites or paid subscriptions
- Streaming audio/video content from shady sites
- Coding and development
- Downloading malware samples

Computer specs: CPU: i9 12900kf
RAM: 32 GB DDR5
GPU: RTX 3080TI
SSD1: 2TB 980 Pro NVMe
SSD2: 111GB SATA6
HDD: 1TB

What I'm looking for?: Not looking for any feedback.

Andrew3000

Level 11

Thread author

Verified

Top Poster

Malware Hunter

Well-known

Apr 5, 2022

Also using:

Comodo Cleaning Essentials / Autoruns
Process Explorer
Autoruns
GetSusp (From McAfee)
ShadowDefender
SandBoxie
TCPView
Others tools

Every drive is encrypted with BitLocker

EDIT: 15/04/2022

FROM:
Unknown App: Low restricted (also connection to internet blocked)
Application started before kaspersky: Low restricted (also connection to internet blocked)
Trust digitally signed application: Enabled

TO:
Unknown App: High restricted (also connection to internet blocked)
Application started before kaspersky: High restricted (also connection to internet blocked)
Trust digitally signed application: Disabled

EDIT 15/01/2023

FROM:
Bitwarden

TO:
KeePassXC

Last edited: Jan 15, 2023

Reactions: Nevi, Venustus, cryogent and 8 others

Similar threads

Advanced Plus Security Andrew3000's Smartphone Config 2023

Replies: 7

Views: 1,314

Mobile Setup Configuration Help & Showcase Jan 5, 2023

Andrew3000

Advice Request Kaspersky Application Control weird behaviour.

Replies: 11

Views: 1,161

Kaspersky Aug 27, 2022

Mystic

Sticky

Hot Take RoboMan's Kaspersky 2023 Light & Solid Settings

2 3

Replies: 54

Views: 7,294

Kaspersky Sep 29, 2023

RoboMan

Top

Advanced Plus Security Andrew3000's Security Config 2023

Not looking for any feedback.

Andrew3000

Level 11

Similar threads