Advanced Plus Security Wraith's Gaming PC Config for 2019

[Wraith]

Have you considered an anti-executable?

The only anti-executable I may give a try is NVT ERP. It allows you to monitor the Program Files and the Windows Folder. I'll install ERP on the other PC I have where ESET IS is installed.

 

[Wraith]

ADDED:
Sandboxie
Does anyone know what's wrong with the sandboxie website? I an unable to purchase a license.

 

[oldschool]

ADDED:
Sandboxie
Does anyone know what's wrong with the sandboxie website? I an unable to purchase a license.

Check Wilders. Lots of discussion over there which I have followed only casually since I don't use it.

 

[Wraith]

UPDATE:
Performed a clean OS Installation.
For browser, I went with Brave(with Avira extension) instead of Chrome.
for AV back to ESET IS along with AppGuard 4 (the original combo that I used to have)

 

[Wraith]

Replaced AppGuard with Simple Software Restriction Policy. Thanks @bribon77

IWR Consultancy : Simple Software-Restriction Policy

See our downloads page for the latest release.

iwrconsultancy.co.uk

 

[Andy Ful]

People who use AppGuard and SSRP usually have unprotected shortcuts and Windows writable subfolders. It is not easy to protect shortcuts properly in SRP, but it is possible. On Windows 7, PowerShell and some LOLBins should be also blocked. Some hardening is also advisable like blocking remote features (RDP, Remote Registry, Remote Shell) and SMB protocols.

 

[Wraith]

People who use AppGuard and SSRP usually have unprotected shortcuts and Windows writable subfolders. It is not easy to protect shortcuts properly in SRP, but it is possible. On Windows 7, PowerShell and some LOLBins should be also blocked. Some hardening is also advisable like blocking remote features (RDP, Remote Registry, Remote Shell) and SMB protocols.

An excellent point about the unprotected shortcuts. Currently I don't have that covered. For the blocking of remote features, I use SH and I have ESET HIPS and firewall rules set up to block execution of powershell & wscript. On my windows 10 pc, I use VS alongwith the tried and tested H_C designed by you my friend. Light, simple and effective.