Basic Security Chri.Mi Security Config 2020

[Chri.Mi]

Replaced EEK with NPE

 

[Chri.Mi]

Replaced forticlient and simplewall with spyshelter free

 

[Chri.Mi]

Replaced Avast with WV in real time. Replaced WV with EEK in malware removal tools. Installed Driver Easy. Went back on Admin account.Disabled Windows Defender.

 

[Chri.Mi]

Replaced WV with Comodo Firewall (based on Cruelsister config). Using WV as virus removal Tool again. I had just forgot to report some config settings.
P.S. I dont know if have to write Macrium Reflect under data backup too, theorically data is backup too

 

[Vitali Ortzi]

Replaced WV with Comodo Firewall (based on Cruelsister config). Using WV as virus removal Tool again

I bet lower CPU usage even though wisevecter is so dam light.

 

[Chri.Mi]

Y but is not for this i using comodo. I use it like anti-exe, allowing just a tweaked TVL. In practice all work around Autocontainment with rules for Malicious block, Unknown block, Safe allow (but not for child process, i think should give more protection vs exploits). Then Firewall will block Malicious and Unknown (blocking sandbox items) and allowing safe. Virusscope for all processes. Script protection with some exe copied from Hard Configurator (Script Interpreters + Enhanced).

 

[Vitali Ortzi]

Disable virus scope .
Better running wise vector instead if you really need an AV Engine .
BTW remove everything from trusted vender except the applications you use .

 

[Chri.Mi]

Disable virus scope .
Better running wise vector instead if you really need an AV Engine .
BTW remove everything from trusted vender except the applications you use .

I dont wanna disable virusscope, i can always run into sandbox items, and no give problems so why disable.
Dont need AV last time i got infection was years ago.
Already did. I get the list from applications on my pc, i rebuild when delete or integrate new programs.

 

[Vitali Ortzi]

I don't use an AV either .
Since Microsoft done so much optimizations to drivers / kernel and made many Enterprise grade mitigations available to the household.

 

[Back3]

No issues between Comodo firewall and H_C ?

 

[Vitali Ortzi]

No issues between Comodo firewall and H_C ?

Wait till it blocks comodo uninstall scripts XD.

 

[Chri.Mi]

No issues between Comodo firewall and H_C ?

ATM no issues.

 

[Chri.Mi]

Wait till it blocks comodo uninstall scripts XD.

U can still avoid the script component and just use as anti-exe.

Wait till it blocks comodo uninstall scripts XD.

Or u talking about H_C?

 

[Vitali Ortzi]

Or u talking about H_C?

Yes just remember to disable it restart only then proceeded to uninstall comodo .

 

[Chri.Mi]

Replaced Comodo Firewall with SEP Unmanaged Client (Firewall+AntiExploit)

 

[Vitali Ortzi]

nice so network and host exploits only ?

like this ?

still SRP based protection as well ?

 

[Chri.Mi]

nice so network and host exploits only ?

like this ?
View attachment 238975
still SRP based protection as well ?

Perfect

 

[Vitali Ortzi]

Perfect

you can just run a server in a vm with the SLF file i sent you a few days ago.
run the server only when you need changes to the policy if you have only one machine .
better if you can just use an old pc to run as a server .
btw you can use Gmail as SMTP if you want to.
make a new google account then go to your google account allow Less secure apps .
and type in SPEM setup
smtp.google.com
use ssl and port 465 to connect
and username and password of your google account

 

[Vitali Ortzi]

you can just run a server in a vm with the SLF file i sent you a few days ago.
run the server only when you need changes to the policy if you have only one machine .
better if you can just use an old pc to run as a server .
btw you can use Gmail as SMTP if you want to.
make a new google account then go to your google account allow Less secure apps .
and type in SPEM setup
smtp.google.com
use ssl and port 465 to connect
and username and password of your google account
View attachment 239009

then you could just port H_C to application control via polices and even surpass it while adding a few inbuilt ones as well just remember to set test mode a few weeks set exceptions only then production mode .

 

[Chri.Mi]

Replaced SEP with KSC Free. ENabled WV in real time. Removed all removal tools