Advanced Plus Security Brahman's Home PC configuration 2025

Last updated
Oct 10, 2025
How it's used?
For home and private use
Operating system
Windows 11
On-device encryption
BitLocker Device Encryption for Windows
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
Off
Network firewall
Enabled
Real-time security
1. Kaspersky Premium
2. Nextdns doh with Yogadns application
3. Keyscrambler premium
4. Ublock origin on all browsers.
Firewall security
Other - Internet Security (3rd-party)
About custom security
1. Kaspersky premium with
a) Protected Folders implemented on all hard disks.
b) Turned off " trust digitally signed applications"
c) Https filtering is turned on ( as i do not use adguard for windows anymore)
d) Blocked port 853 UDP and TCP traffic in through Firewall>packet rules.
e) Disabled Ftp on random ports. Enabled auto blocking port scanning applications and ip.
2. Windows Hardening done.
a) Enabled password protected admin.
b) Attack Surface Reduction Rules enabled even though it does not work while Kaspersky is on.
c) remote desktop disabled.
d) HVCI Enabled ( with platform security level " secure boot and DMA protection" virtualization with " enabled with UEFI lock" and Credential guard is enabled with uefi lock.
3. Keyscrambler for encrypting keyboard inputs.
4. Yogadns application as windows service mode at system level for doh enforcement with two local block list ( hagezi's NSFW and DoH/VPN/TOR/Proxy Bypass lists)
Periodic malware scanners
1.SophosScanAndClean.
2. EEK.
3. ADW.
Malware sample testing
I do not participate in malware testing
Environment for malware testing
NA
Browser(s) and extensions
1. Edge ( not used)
2. Vivaldi.
3. Ulaa.

Extensions :
1. Bitwarden
2. Ublock origin.
Secure DNS
Nextdns.
Desktop VPN
No VPn apps at system level. Vivaldi Proton Vpn for emergencies.
Password manager
Bitwarden with TOTP enabled. Passkeys on supported websites.
Proton as a backup.
File and Photo backup
1. NAS
2. Basic Ondrive, mega and google drive.
Subscriptions
    • None
System recovery
1. Veeam windows agent configured to save to NAS.
2. Windows Image backup on a local HDD ( monthly)
Risk factors
    • Browsing to popular websites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
1. Amd Ryzen 5 3600.
2. 2x16 Gb DDR 4 @3200Mhz.
3. Asus tuff gaming X570 Motherboard
4. Zotac Gtx 1660 super 6Gb Vram
5. 2x 512 Gb NVME Gen4 SSD XPG gamix, 8TB HGST HDD, 2x 2 TB Thosiba HDD.
What I'm looking for?

Looking for medium feedback.

Brahman

Level 20
Thread author
Verified
Top Poster
Well-known
Forum Veteran
Aug 22, 2013
958
5,115
1,869
Hi all, I've reinstalled windows after a very very long time. updated to windows 11 Enterprise 25H2. The main change i have made is to remove Adguard windows from my system. It didn't made any sense to keep it as most of its uses were covers by other apps i use and with the new version it was making the regular browsing so slow. So after so many years of uninterrupted use adguard is off. Hope i have include almost all changes made to my system.
 
Hi all, I've reinstalled windows after a very very long time. updated to windows 11 Enterprise 25H2. The main change i have made is to remove Adguard windows from my system. It didn't made any sense to keep it as most of its uses were covers by other apps i use and with the new version it was making the regular browsing so slow. So after so many years of uninterrupted use adguard is off. Hope i have include almost all changes made to my system.
Hey Brahman,

Sounds like a solid refresh on your setup—Windows 11 Enterprise 25H2 is a nice choice for stability and features. Dropping AdGuard makes sense if it was bogging things down and you've got overlaps with other tools. Out of curiosity, what apps are you leaning on now for ad-blocking and browsing protection? Always good to hear how folks streamline their configs.

If you've got a full list of changes, feel free to share more details—might spark some ideas for others here.

Cheers!
 
  • Like
Reactions: Brahman
When tried to install Ulaa (downloaded from the official website) months ago, it was stopped by K free, flagging it as malware, with reverting changes after removal.

 
When tried to install Ulaa (downloaded from the official website) months ago, it was stopped by K free, flagging it as malware, with reverting changes after removal.

Ulaa is still not used by many. It's still a niche category browser and it has some quarks such as not getting updated automatically and the issues with K and other similar avs. But the company behind it is trusted and it's not a trojan or a malware, the detection is a false positives. You can safely install it.