ConfigureDefender utility for Windows 10/11

[shmu26]

That's because Max sets SS > Block in Edge, etc. Please change > 'warn" or "user". I always first choose a protection level and then manually adjust individual features as needed.

Ah, "Explorer" means Windows Explorer, i.e., the normal way you open a file. Thanks.

 

[Andy Ful]

@Andy Ful when does the new version of CD arrive?

In June, I think.

 

[oldschool]

@Andy Ful - It seems that beginning with 1809 (I think) when executing a program I get this message instead of the the usual grey smartscreen warning. Can you explain what has changed in Windows?

 

[Gandalf_The_Grey]

@Andy Ful - It seems that beginning with 1809 (I think) when executing a program I get this message instead of the the usual grey smartscreen warning. Can you explain what has changed in Windows?

I think you allowed only apps from the store: How to Allow Only Apps From the Store on Windows 10 (and Whitelist Desktop Apps)
I don't get that message.
You can click on "change my app recommendation settings" to change it.

 

[Andy Ful]

@Andy Ful - It seems that beginning with 1809 (I think) when executing a program I get this message instead of the the usual grey smartscreen warning. Can you explain what has changed in Windows?

Gandalf_The_Grey is right. This setting is not supported in ConfigureDefender (it is a combination of SmartScreen = Block for desktop applications and normal SmartScreen for Apps from Microsoft Store).
But on Windows 1903 your setting seems to be default:

How to Run Windows 10 May 2019 (Version 1903) in S-like Mode

Applies to: Windows 10 May 2019 (Version 1903) Upon installing the new OS Update a couple days ago I noticed minor changes in wording for the Apps & Features settings, and while it's fairly easy to understand, the recommended option (as seen in image) may not be suitable for the majority of...

malwaretips.com

 

[Gandalf_The_Grey]

Gandalf_The_Grey is right. This setting is not supported in ConfigureDefender (it is a combination of SmartScreen = Block for desktop applications and normal SmartScreen for Apps from Microsoft Store).
But on Windows 1903 your setting seems to be default:

How to Run Windows 10 May 2019 (Version 1903) in S-like Mode

Applies to: Windows 10 May 2019 (Version 1903) Upon installing the new OS Update a couple days ago I noticed minor changes in wording for the Apps & Features settings, and while it's fairly easy to understand, the recommended option (as seen in image) may not be suitable for the majority of...

malwaretips.com

For me on 1903 the default after a clean install is "Anywhere".

 

[Andy Ful]

For me on 1903 the default after a clean install is "Anywhere".

So it is recommended only by M$.

 

[oldschool]

Changed to "Anywhere". The settings were not available as I normally use SUA. That M$ Store warning was a PITA. I usually keep Smartcreen set to "Warn". Thanks to both of you.

 

[Andy Ful]

NEW CONFIGUREDEFENDER ver. 2.0.0.1
1. For Windows 64-bit: AndyFul/ConfigureDefender
2. For Windows 32-bit: AndyFul/ConfigureDefender

What is new?

1. Added icon.
2. Added the section PROTECTION LEVELS which includes the renamed buttons: <Defender default settings> ----> <DEFAULT> <Defender high settings> ----> <HIGH> <Child Protection> ----> <MAX>
3. Added the button <Defender Security Log>, which allows seeing last 200 Windows Defender events. It also shows the names of ASR rules alongside GUIDs.
4. Added the splash alert when applying time-consuming features.
5. Renamed option "Reporting Level (MAPS membership level)" to "Cloud-delivered Protection" (the name used in the WD Security Center) and renamed its "Advanced" setting to "ON".
6. Extended the abilities of <REFRESH> button.
7. Updated the changes made by Microsoft to allow file & folder exclusions for some additional ASR rules.
8. Corrected the issue with closing the application.
9. Extended the help.

 

[Back3]

Have installed New ConfigureDefender with Commodo Firewall at CS seetings plus HIPS. Version of Windows 1903. Made a restore point.Disabled the sandbox for 15 minutes and put HIPS in training mode. Protection level of CD High.Booting. So far so good. Thanks for your excellent work.

 

[Andy Ful]

Have installed New ConfigureDefender with Commodo Firewall at CS seetings plus HIPS. Version of Windows 1903. Made a restore point.Disabled the sandbox for 15 minutes and put HIPS in training mode. Protection level of CD High.Booting. So far so good. Thannks for your excellent work.

Did CF allow running ConfigureDefender unsandboxed?

 

[Back3]

Did CF allow running ConfigureDefender unsandboxed?

The sandbox rule made by Comodo concerning ConfigureDefender is to ignore it....

 

[oldschool]

Installed along with Firewall Hardening Tool. Thanks Andy. I guess the new icons only come with H_C?

 

[Andy Ful]

Installed along with Firewall Hardening Tool. Thanks Andy. I guess the new icons only come with H_C?

New icons for H_C, ConfigureDefender, DocumentsAntiExploit, and SwitchDefaultDeny shortcuts can be downloaded from H_C website on GitHub:

Hard_Configurator/ScreenShots/Icons at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

But, I did not prepare new icons for RunBySmartScreen, yet.

 

[blackice]

Downloaded CD this morning, worked great. Also enabled WD sandbox. A good morning.

 

[shmu26]

@Andy Ful have you formed an opinion yet about WD sandbox?

 

[Andy Ful]

@Andy Ful have you formed an opinion yet about WD sandbox?

Not, yet. I will investigate it. Maybe it will be available via ConfigureDefender. We will see.

 

[Special]

Can someone explain these options a little, and what Defender does when their ON vs. when their OFF?

"Behavior Monitoring"

"Scan all downloaded files and attachments"

"Script Scanning"

 

[oldschool]

Can someone explain these options a little, and what Defender does when their ON vs. when their OFF?

"Behavior Monitoring"

"Scan all downloaded files and attachments"

"Script Scanning"

Just what they say and are basic functions of any AV. I think they are self-explanatory categories and On/Off mean just that. You want them all On.

 

[Arequire]

"Behavior Monitoring"

The AV engine will monitor file processes, file and registry changes, and other events on your endpoints for suspicious and known malicious activity. These activities include events such as processes making unusual changes to existing files, modifying or creating automatic startup registry keys and startup locations and other changes to the file system or file structure.

"Scan all downloaded files and attachments"

Downloaded files and attachments are automatically scanned. This operates in addition to the SmartScreen filter, which scans files before and during downloading.

"Script Scanning"

I couldn't find a description from Microsoft about script scanning. Essentially, all scripts that run are automatically scanned.