SECURITY: Basic Archentrope's Security Configuration 2020

Last updated
Oct 22, 2020
About device
Primary device
Operating system
Windows 10 Insider Preview
Sign-in identity
Sign-in with Microsoft account
Log-in security
    • Account password
Permissions
Administrator user account
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Malware samples
No - malware is not downloaded
Firewall protection
Provided by a third-party security vendor - see details below.
Real-time malware protection
Kaspersky Internet Security 2020
RTP & OS hardening settings
None
Periodic scanning
Emsisoft Emergency Kit
Browsers
Microsoft Edge based on Chromium, Kaspersky Anti-Banner
Optimisation apps
DUMo, Process Lasso, Uninstall Tool
My Files & Photos backup
OneDrive
My Files backup schedule
Automatic - sync to a trusted cloud provider, or local attached storage
Device recovery & settings
None
Device backup schedule
None - No backups
Computer specifications
OMEN by HP 873-078rcn Desktop PC
Edoras motherboard
Intel Core i7-9700F
Memory 16 GB
NVIDIA GeForce RTX 2070 SUPER (8 GB)
256 GB PCIe NVMe TLC M.2 Solid State
Device activity usage
  1. Computer games
  2. Financial and sensitive documents
  3. Generic web browsing
  4. Downloading and installing new software(s)
  5. Downloading files from unfamiliar sites
Your changelog
20 October, First Release
22 October, Adjust UAC settings, add browser add-ons, periodic scanners and deny outgoing NTLM traffic to remote servers in network.

harlan4096

Moderator
Verified
Staff member
Malware Hunter
Apr 28, 2015
6,955
@Archentrope:

You may set UAC to Always Notify.

Do You have Kaspersky Anti-Banner module enabled? in Browsers and Extensions, You may add uBlock Origin or AdGuard AdBlocker.

In Backup and Restore, You may add a full Image System BackUp solution: Macrium Reflect Free or AOEMI Backupper, both are free and reliable.

In Periodic Scanners, You may add MalWareBytes Free and EmsiSoft Emergengy.

In Browsers and Extensions, You may add uBlock Origin or AdGuard AdBlocker.

Please kindly reflect Your changes editing Your config, and announcing them here, thanks for sharing :)
 

Gandalf_The_Grey

Level 42
Verified
Trusted
Content Creator
Apr 24, 2016
3,106
You mean the new windows internal feature don't you? Nice then!
Also which DNS provider did you use?

Else please set UAC to maximum for security (I'm at mobile but forum search give a lot of reading stuff why it's important)
An example: Bypassing Windows 10 UAC with mock folders and DLL hijacking
Gebert's straightforward mitigation advice to prevent UAC bypass attacks is setting UAC to "Always Notify." Doing so will always show the user UAC prompts before high-risk applications are executed.
 

Archentrope

Level 1
Oct 10, 2020
11
You mean the new windows internal feature don't you? Nice then!
Also which DNS provider did you use?

Else please set UAC to maximum for security (I'm at mobile but forum search give a lot of reading stuff why it's important)
Thanks for the advice. I'm not using the features built into Windows 10 Insider Preview. I have added 1.1.1.1 (Cloudflare) as DNS to my MikroTik router so that all devices that access the network can use DoH.
 

Archentrope

Level 1
Oct 10, 2020
11
@Archentrope:

You may set UAC to Always Notify.

Do You have Kaspersky Anti-Banner module enabled? in Browsers and Extensions, You may add uBlock Origin or AdGuard AdBlocker.

In Backup and Restore, You may add a full Image System BackUp solution: Macrium Reflect Free or AOEMI Backupper, both are free and reliable.

In Periodic Scanners, You may add MalWareBytes Free and EmsiSoft Emergengy.

In Browsers and Extensions, You may add uBlock Origin or AdGuard AdBlocker.

Please kindly reflect Your changes editing Your config, and announcing them here, thanks for sharing :)
Thanks for the advice.
 
Top