SECURE: Complete brod's Security Configuration (mid 2018)

Most recent changes
Aug 11, 2018
Operating System
Windows Edition
Pro
Build
Spring Creators Update
System type
64-bit OS
Security Updates
Automatic Updates - All security and feature updates
User Access Control
Always Notify - For App installs, Modify system & User settings
Device Firewall
Windows Firewall - Network security provided by Microsoft
Device Security
Windows Defender SmartScreen (Windows 10)
User Account
Administrator - User has complete control over the device
Recent Security Incidents
No malware or privacy issues
Malware Testing
None - No Malware on host PC or VM
Real-time Web & Malware Protection
Windows Defender
Configure Defender v.1.1 (high settings, CPU load reduced a bit)
SysHardener v.1.5 (recommended settings)
Security Protection settings
Custom - Major changes for Increased Security
Virus and Malware Removal Tools
Zemana AntiMalware Portable
Hitman Pro (portable .exe)
Browsers and Extensions
Opera (malware protection on, default adblocker off)
Web Privacy
uBlock Origin (Easy List+hphosts lists+i don't care about cookies)
Password Management
None. Important stuff written in a paper
Default Web Search
Google SSL
System Utilities collection
Windows Disk Cleaner
Data Backup
OneDrive (real time backups)
Frequency of Data backups
Always-on Sync
System Backup
Macrium Reflect Free (daily differentials)
Frequency of System backups
Regularly

brod56

Level 13
Joined
Feb 13, 2017
Messages
600
OS
Windows 10
Antivirus
Default-Deny
#1
Some notes:
- Minimalism is the main focus on the configuration
- Opera is my go-to browser due to being easier on the memory and having a nice UI
- HTTPS Everywhere is not used; I find it mostly pointless these days
- CCleaner is not used; stopped trusting it after the hack controversy (plus having found that the Registry Cleaner has a tendency to break Windows Search)
- Windows Firewall is manually set up to block outbound connections from untrusted apps
- No antiexecutables due to the tweaking of Windows permissions via SysHardener and Configure Defender
- Common sense always comes before any security program.

Any tips are highly appreciated :)
 
Last edited:

brod56

Level 13
Joined
Feb 13, 2017
Messages
600
OS
Windows 10
Antivirus
Default-Deny
#4
Nice Config!
You can add Tools like CCleaner,WDC (Wise Disk Cleaner) or NepTune

Thanks for sharing

'dopse
Thanks for the tip. I left CCleaner after the hack controversy, and after having found that the Registry Cleaner breaks Windows Search. I use Windows Disk Cleaner rarely, to free up some space. No performance issues.
EDIT: Just updated the notes to state this.
 
Likes: oldschool

Question

Level 3
Verified
Joined
Jun 22, 2018
Messages
137
OS
Windows 10
Antivirus
Avast
#5
Thanks for the tip. I left CCleaner after the hack controversy, and after having found that the Registry Cleaner breaks Windows Search. I use Windows Disk Cleaner rarely, to free up some space. No performance issues.
I think Wise Disk Cleaner is safe. CCleaner is safe too

Unbenannt.PNG

(You can edit what WDC should Clean)
 

LDogg

Level 13
Verified
Joined
May 4, 2018
Messages
619
#7
Optional software and aspects to add to your config:

Search engine: Change to either Startpage or DuckDuckGo - I hate to see people used for ad profit
Security: NVT OSArmor 1.4 can be supplemented alongside Syshardener & WD
On demand scanner(s): Emsisoft Emegency Kit can go alongside Zemana Portable

Opera extensions you could use:
  • Netcraft - comprehensive PUP protection
  • uBlock Origin - can be highly customised, low CPU usage, massive help on this forum, AdGuard isn't all all that good privacy wise
  • Nano Adblocker w/ Nano Defender - (alternative you could try to the above & AdGuard)
  • Cookie Auto-Delete - self explanatory within it's name
  • Malwarebytes and/or Windows Defender Browser extension - online threats
  • Privacy Possum - does a better job of stopping various referrer headers online
  • Install Chrome Extensions - Exactly what it says
  • Scriptsafe or Script Defender - manage scripts & privacy globally or per site basis
Rest of your config has the rest of the basics covered, well done for using @Andy Ful configure defender too.

~LDogg
 

brod56

Level 13
Joined
Feb 13, 2017
Messages
600
OS
Windows 10
Antivirus
Default-Deny
#8
Optional software and aspects to add to your config:

Search engine: Change to either Startpage or DuckDuckGo - I hate to see people used for ad profit
Security: NVT OSArmor 1.4 can be supplemented alongside Syshardener & WD
On demand scanner(s): Emsisoft Emegency Kit can go alongside Zemana Portable

Opera extensions you could use:
  • Netcraft - comprehensive PUP protection
  • uBlock Origin - can be highly customised, low CPU usage, massive help on this forum, AdGuard isn't all all that good privacy wise
  • Nano Adblocker w/ Nano Defender - (alternative you could try to the above & AdGuard)
  • Cookie Auto-Delete - self explanatory within it's name
  • Malwarebytes and/or Windows Defender Browser extension - online threats
  • Privacy Possum - does a better job of stopping various referrer headers online
  • Install Chrome Extensions - Exactly what it says
  • Scriptsafe or Script Defender - manage scripts & privacy globally or per site basis
Rest of your config has the rest of the basics covered, well done for using @Andy Ful configure defender too.

~LDogg
Thank you for the suggestions.
Privacy is not my main concern; I know it's almost inevitable that our data is collected for ads and other reasons. My main concerns are security and convenience. In spite of that, I will take a look at all the extensions you mentioned.
Regarding the scanners, I have seen many tests and sticked with Zemana. Having another one can't hurt, I agree. We all have our paranoid side :)
 

TairikuOkami

Level 17
Content Creator
Verified
Joined
May 13, 2017
Messages
802
OS
Windows 10
Antivirus
Default-Deny
#9
Extensions: I would add Avira Browser Safety or at least Netcraft.
That DNS though, I am sure you could do better, much much better.
UltraDNS (Neustar) for starters or 1.1.1.1 or 9.9.9.9, faster and safer.
 

LDogg

Level 13
Verified
Joined
May 4, 2018
Messages
619
#10
Extensions: I would add Avira Browser Safety or at least Netcraft.
That DNS though, I am sure you could do better, much much better.
UltraDNS (Neustar) for starters or 1.1.1.1 or 9.9.9.9, faster and safer.
The DNS suggestion I agree with, however with Avira Browser Safety I do not, it's essentially a Hogware, takes up way to much CPU and someone else said on the forum they've seen it take up as much as 600mb. Which is why Malwarebytes Browser Extension or Norton Web Safe/Web Search would more of an ideal extension to use.

~LDogg
 

TairikuOkami

Level 17
Content Creator
Verified
Joined
May 13, 2017
Messages
802
OS
Windows 10
Antivirus
Default-Deny
#11
however with Avira Browser Safety I do not, it's essentially a Hogware, takes up way to much CPU and someone else said on the forum they've seen it take up as much as 600mb.
Yes, but I think it was running on Chrome. Opera might be different, not to mention, that the leak could be caused by a security software.
I would probably recommend K9 instead, it is better, but it might be too much to handle, rules have to be polished, before it becomes usable.
 

brod56

Level 13
Joined
Feb 13, 2017
Messages
600
OS
Windows 10
Antivirus
Default-Deny
#12
Extensions: I would add Avira Browser Safety or at least Netcraft.
That DNS though, I am sure you could do better, much much better.
UltraDNS (Neustar) for starters or 1.1.1.1 or 9.9.9.9, faster and safer.
I have tested Avira extension a while back and it slowed the navigation a bit too much for me. If I wanted to get a hardened web filtering extension, I'm sure I could use custom uBlock filters and just let it do all the work for me. For now, I'm sticking with the convenience of AdGuard.
About the DNS, I completely agree with you. I only started using a custom DNS recently, and I didn't do a proper research on the best ones yet. Will look into it for sure.
 

Question

Level 3
Verified
Joined
Jun 22, 2018
Messages
137
OS
Windows 10
Antivirus
Avast
#13
I have tested Avira extension a while back and it slowed the navigation a bit too much for me. If I wanted to get a hardened web filtering extension, I'm sure I could use custom uBlock filters and just let it do all the work for me. For now, I'm sticking with the convenience of AdGuard.
About the DNS, I completely agree with you. I only started using a custom DNS recently, and I didn't do a proper research on the best ones yet. Will look into it for sure.
With the DNS you can use DNSJumper
You just click test and it find the fastest DNS for you!

Download here: Click Me
 

oldschool

Level 10
Verified
Joined
Mar 29, 2018
Messages
486
OS
Windows 10
Antivirus
AVG
#17
Nice & simple config.! @illumination will like it for sure. You might try TinyWall to harden and control WF unless you configure the latter directly. Very lightweight and non-intrusive.
 
Likes: brod56

brod56

Level 13
Joined
Feb 13, 2017
Messages
600
OS
Windows 10
Antivirus
Default-Deny
#18
Nice & simple config.! @illumination will like it for sure. You might try TinyWall to harden and control WF unless you configure the latter directly. Very lightweight and non-intrusive.
Thanks! TinyWall is now on learning mode, will switch to Normal Mode after using the PC for a couple of days.
EDIT: I ended up playing a bit with Windows Firewall advanced settings instead, guess it does the same :)
 
Last edited:

brod56

Level 13
Joined
Feb 13, 2017
Messages
600
OS
Windows 10
Antivirus
Default-Deny
#19
UPDATE 1 (15/07/2018)
- Replaced OpenDNS with Norton ConnectSafe DNS
- Added VirusTotal context menu uploader
- Added Emsisoft Emergency Kit and HitmanPro
- Added Process Explorer
 
Last edited:

Question

Level 3
Verified
Joined
Jun 22, 2018
Messages
137
OS
Windows 10
Antivirus
Avast
#20
UPDATE 1 (15/07/2018)
- Replaced OpenDNS with Norton ConnectSafe DNS
- Added VirusTotal context menu uploader
- Added Emsisoft Emergency Kit and HitmanPro
- Added Process Explorer
I like your Config very much! You can (optional) use WDC Portable + Privacy Eraser Portable. I think you like it for sure.
Privacy Eraser: Click To Download
Wise Disk Cleaner: Click To Download

You can use your own WDC Settings or my Settings: Click Me

ѕнarιng ιѕ carιng
'[̲̅d̲̅][̲̅o̲̅][̲̅p̲̅][̲̅s̲̅][̲̅e̲̅]
 

Similar Threads

Similar Threads