New Update DefenderUI by VoodooShield - Turn on Hidden Security Features of Microsoft Defender

[danb]

Hey Guys, sorry, I have been extremely busy adding the "final" features and finishing up DefenderUI Pro and WDAC Lockdown, but we are in great shape now.

Yes, DefenderUI Free's current version is 1.22, DefenderUI Pro and WDAC Lockdown is 1.26. There is a small change for DefenderUI Pro and WDAC Lockdown that will be included in 1.27 when it is released, but it is such a small change that I will probably wait until something else needs to be fixed or changed before releasing it.

So there probably will not be any updates to any of the apps for a little while because I think all of the bugs are worked out, but if you guys find anything please let me know, thank you!

 

[NormanF]

Dan, I don't know if you knew but the changes to DefenderUI Pro came at the same time Microsoft made changes to WDAC in RTM build 26100.994!

 

[danb]

Dan, I don't know if you knew but the changes to DefenderUI Pro came at the same time Microsoft made changes to WDAC in RTM build 26100.994!

I was not aware of this, thank you for letting me know! Are these the changes you are talking about? Has anyone tested on 26100.994?

• Fixed an issue that prevents Windows Defender Application Control (WDAC) from checking some application policies.
• Fixed an issue that caused Windows Defender Application Control (WDAC) to report that a certain policy class is inactive or unauthorized.

It looks like these changes will not affect WDAC Lockdown, but I better make sure .

 

[NormanF]

I was not aware of this, thank you for letting me know! Are these the changes you are talking about? Has anyone tested on 26100.994?

• Fixed an issue that prevents Windows Defender Application Control (WDAC) from checking some application policies.
• Fixed an issue that caused Windows Defender Application Control (WDAC) to report that a certain policy class is inactive or unauthorized.

It looks like these changes will not affect WDAC Lockdown, but I better make sure .

Yup! Those are the changes I was talking about. I think you're good to go but if a patch is needed, you'll get it sorted out.

 

[Oldie1950]

I'm currently using Emsisoft Business and would like to install DefenderUI Pro as well. Are there any problems? Has anyone tried the combination?

 

[Gandalf_The_Grey]

I'm currently using Emsisoft Business and would like to install DefenderUI Pro as well. Are there any problems? Has anyone tried the combination?

The main goal of DefenderUI is is configuring Microsoft Defender.
You are using Emsisoft , so you don't use Microsoft Defender.
You can use Cyberlock or WDACLockdown.
See:

New Update - VoodooShield CyberLock 7.0

To simplify the user prompt, what do you think of replacing VoodooAi and WhitelistCloud verdicts on the normal alert with CyberLock, which will show the adjusted result of VAi + WCL? You can show VAi and WCL verdicts when the user hovers over the CyberLock result. Similarly, you can show...

malwaretips.com

 

[Oldie1950]

@Gandalf_The_Grey
Thanks for the information. I know that Emsisoft turns off Defender. However, I still use it as an on-demand scanner. WDACLockdown is probably the right complement to Emsisoft.

 

[NormanF]

I'm running MIcrosoft Defender for Business on top of Microsoft Defender.

Works well with DefenderUI Pro.

 

[Guilhermesene]

I've never used this program, and I found its idea of allowing adjustments and improvements to Windows Defender very interesting.

Could someone please answer some questions?

Are the settings used in it applied to the entire system, or just to the specific user?

For example, if I use SUA (an admin user and another standard user) and apply the configuration to the admin user, will it also apply to the standard user?

Furthermore, when applying settings and adjustments using DefenderUI does it change the GPOs?

Thanks!!

 

[Guilhermesene]

@Gandalf_The_Grey @oldschool @danb @Oldie1950

Maybe you can help me with my doubts, please

 

[Oldie1950]

@Gandalf_The_Grey @oldschool @danb @Oldie1950

Maybe you can help me with my doubts, please

I'm sorry, I can't answer your question.

 

[ErzCrz]

I've never used this program, and I found its idea of allowing adjustments and improvements to Windows Defender very interesting.

Could someone please answer some questions?

Are the settings used in it applied to the entire system, or just to the specific user?

For example, if I use SUA (an admin user and another standard user) and apply the configuration to the admin user, will it also apply to the standard user?

Furthermore, when applying settings and adjustments using DefenderUI does it change the GPOs?

Thanks!!

Reading @Andy Ful 's Configure Defender Link tool description, which is similar product in it unlocking MD features, explains the features being available via GOP / Registry entries/scripts and Powershell as detailed below. CD doesn't run in the background like DefenderUI does it sets the policies and that's it whereas I think you can do a little more with DefenderUI and it's DefenderGuard is an additional protection of the MD processes.

Windows Defender settings are stored in the Windows Registry and most of them are not available from Windows Defender Security Center. They can be managed by using:

• Group Policy Management Console (gpedit.msc is not available in Windows Home edition)
• Direct Registry editing (manually, via *.reg files or scripts)
• PowerShell cmdlets (set-mppreference, add-mppreference, remove-mppreference, PowerShell 5.0)

I'm not sure of your second point as I don't have multiple users on my machine but @danb will be able to clarify when he's next here.

EDIT: it can be deployed silently across a network. DefenderUI User Manual

 

[Guilhermesene]

Reading @Andy Ful 's Configure Defender Link tool description, which is similar product in it unlocking MD features, explains the features being available via GOP / Registry entries/scripts and Powershell as detailed below. CD doesn't run in the background like DefenderUI does it sets the policies and that's it whereas I think you can do a little more with DefenderUI and it's DefenderGuard is an additional protection of the MD processes.

Windows Defender settings are stored in the Windows Registry and most of them are not available from Windows Defender Security Center. They can be managed by using:

• Group Policy Management Console (gpedit.msc is not available in Windows Home edition)
• Direct Registry editing (manually, via *.reg files or scripts)
• PowerShell cmdlets (set-mppreference, add-mppreference, remove-mppreference, PowerShell 5.0)

I'm not sure of your second point as I don't have multiple users on my machine but @danb will be able to clarify when he's next here.

EDIT: it can be deployed silently across a network. DefenderUI User Manual

@ErzCrz Thank you very much for taking the time to help me with the information

 

[oldschool]

Are the settings used in it applied to the entire system, or just to the specific user?

Yes. Defender settings are always system-wide.

when applying settings and adjustments using DefenderUI does it change the GPOs?

No, it either uses Powershell or registry but @danb could tell you for certain.

 

[Guilhermesene]

@oldschool

Thank you very much for answering my questions lately you are helping me a lot

 

[Lucide]

Hi
I've been a DefenderUI user for a couple of years now (great work). One thing that I've never managed to do is download an uploaded custom profile.
If I copy a generated code, and click "download", nothing happens. The download button doesn't even show a hover effect, so I always thought it was a ui layout bug.
But today I'd really need this to work, as I have to sync a long exclusion list between two machines. I've tried the -CustomProfile CODE cli command, but to avail.
What does even constitute a "profile"? Are exclusion paths included? (are they encrypted?) "Basic"->"General" options?

For example, I disable the "network protection" option. My uploaded profile should have it enabled, but the download button shows no effect.

 

[simmerskool]

I just use the recommended profile, and I do not recall seeing your question before, so suggest you contact Dan by email if you don't want to wait for him to login here.

 

[aldist]

One thing that I've never managed to do is download an uploaded custom profile.

The program creates, saves and uploads custom config only via the Internet (allow network access for defenderui.exe): you have changed some options in the program, click Save, the field on the left will show 5 letters (let's call it ID#1), it means that your custom config has been applied. Now when you switch between profiles, when you select Custom Profile, your ID#1 will always be shown in the field.
If you change any more options, click Save again, you will get a new ID#2, it will be displayed in that field.
To return to the previous Custom Profile, enter ID#1 in the field, click Load, and the program will load the desired profile.
If you don't see the ID, most likely the program is not connected to the internet.
So, you have understood that there can be several variants of the user profile, but the program does it only through the Internet!

The program stores settings in [HKEY_LOCAL_MACHINE/SOFTWARE/DefenderUI]. The author promised to make offline saving and loading of profiles, it seems we need to remind him about it.

 

[Lucide]

Yes I'm aware of how the profile system is supposed to work (and I have read your previous confirmation).
The tool is able to generate an id (and I assume upload the config successfully), but it's not able to retrieve it on both my machines.
I've no third party firewall and windows' firewall doesn't block outbound connections by default.

The program stores settings in [HKEY_LOCAL_MACHINE/SOFTWARE/DefenderUI]. The author promised to make offline saving and loading of profiles, it seems we need to remind him about it.

Yes this was also stated on one of your previous posts, but I'm curious about where the issue lies.

and I do not recall seeing your question before, so suggest you contact Dan by email if you don't want to wait for him to login here.

It's ok for me to wait, so my question can be seen by other people who might have a similar issue in the future. From what I've seen, this specific thread is the only one I've found where the dev is personally active and posts about the development. (yes, my previous post was my first post on this forum). If I'm being outside topic I apologize and I'll stop posting.

 

[lokamoka820]

DefenderUI

www.defenderui.com

---

When Windows 11 was leaked, I was hoping we would see a usable Defender UI, but unfortunately it had not changed a bit. Defender is great under the hood but it is incredibly frustrating to use. It is also certainly not bulletproof and Redmond’s idea of zero trust is much different from mine, but at least it is something to work from.

So I decided to build a fully functional Defender UI. Here are some preliminary screenshots, a beta version will be really in a week or two.

Is Defender UI just a better GUI for Microsoft Defender, or it will enhance the level of its protection (with the recommended sittings)?