Advanced Security Divine Barakah's PC Security Config 2024

Last updated
Sep 5, 2024
How it's used?
For home and private use
Operating system
macOS 15 Sequoia
On-device encryption
BitLocker Device Encryption for Windows
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
On
Network firewall
Enabled
About WiFi router
I am using ISP-provided router. I connected a TP-Link Access Point.
Real-time security
Webroot Internet Security Plus
Firewall security
Microsoft Defender Firewall
About custom security
DefenderUI Pro Recommended with WDAC enabled
Periodic malware scanners
EEK
Malware sample testing
I do not participate in malware testing
Environment for malware testing
I do not participate in malware testing
Browser(s) and extensions
Vivaldi with multiple profiles

Dashlane, Webroot and Floccus
Secure DNS
NextDNS using Windows 11 DNS over HTTPS manual template
NextDNS with Private DNS setting in Vivaldi
Desktop VPN
BulletVPN is not working in Egypt
I have changed to Windscribe. It works flawlessly using Stealth option.
Password manager
Dashlane
Sticky Password (as backup) and Enpass (synced to Koofr)

NEVER PUT ALL YOUR EGGS IN ONE BASKET
Maintenance tools
Kerish Doctor
Smarty Uninstaller
File and Photo backup
Ente Photos
Koofr
External HDD
Subscriptions
    • None
System recovery
AOMEI BAckupper Pro
Risk factors
    • Browsing to popular websites
    • Working from home
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Lenovo Legion 5

-AMD Ryzen 5 4600H
- 16 GB Ram
- WD Blue SN500 500GB
-1TB WD Black
- Nividia GTX 1650 TI
What I'm looking for?

Looking for maximum feedback.

Jonny Quest

Level 21
Verified
Top Poster
Well-known
Mar 2, 2023
1,081
Nice simple config. Thanks for sharing.
Only one thing to add, instead of EEK use NPE and/or KVRT.
Same thing I was thinking, or along with EEK, use one or two of the above.

Edit:
 
Last edited:

Divine_Barakah

Level 33
Thread author
Verified
Top Poster
Well-known
May 10, 2019
2,289
Nice description, indeed. I had to laugh after reading some of the recent and recurring threads.
Tbh most of the security configs here are overkill. I prefer speed and stability over over exaggerated security (which in my opinion translate to paranoia).
Actually first time i see malwarebytes used in MalwareTips configs

Good config , pretty much and i see youre waterfox enjoyer (y)
Malwarebytes is great. I know some would argue it should not be used as the main protection. But for me its web protection is great and it covers the main attack vector. I am not fond of online tests.

Regarding Waterfox, I use it bc of the fact it has telemetry disabled by default.
Nice simple config. Thanks for sharing.
Only one thing to add, instead of EEK use NPE and/or KVRT.
Tbh I do not need any second-opinion scanners. I do not install new software on this laptop and I have all my files backed up to my external HDD on a weekly basis. The most important files are synced to the cloud in realtime with end-to-end encryption using Kooft Vault.

Well, Microsoft updates proved to be worse than infections. A week ago after monthly security uodates, Windows started behaving up normally. Luckily, I have an up-to-date full system image to restore in such occasions.
Same thing I was thinking, or along with EEK, use one or two of the above.

Edit:
I only run EEK scans for fun every once in a while.
 

lokamoka820

Level 21
Mar 1, 2024
1,060
How did you enable "Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)" on Lenovo Legion 5, I thought it is not compatible, here is mine:

ApplicationFrameHost_2024-08-04_20-07-16.png
 
F

ForgottenSeer 114834

Nice description, indeed. I had to laugh after reading some of the recent and recurring threads.
You should second this post then as I'm curious how it would result. I've ran machines with nothing but windows defaults and ublock in the browser for long periods of time and been fine.

Post in thread 'Make your video test requests!' Make your video test requests!
 
Last edited by a moderator:

oldschool

Level 84
Verified
Top Poster
Well-known
Mar 29, 2018
7,577
How did you enable "Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)" on Lenovo Legion 5, I thought it is not compatible, here is mine:

View attachment 284752
I found that I can only use PIN if I'm signed into my MSA. Once signed in on my administrator account, I create a local user account. So both accounts with PIN. No biometrics available on my cheapo Lenovo laptop.
 

oldschool

Level 84
Verified
Top Poster
Well-known
Mar 29, 2018
7,577
Malwarebytes is great. .... But for me its web protection is great and it covers the main attack vector.
Its web protection is great, so it follows that is the main feature you rely on, as you point out above about browser being the most vulnerable attack point.
I know some would argue it should not be used as the main protection. ... I am not fond of online tests.
Of course, this is the usual view about MBAM, and users fail to understand them with any sense or nuance.
 

Divine_Barakah

Level 33
Thread author
Verified
Top Poster
Well-known
May 10, 2019
2,289
Its web protection is great, so it follows that is the main feature you rely on, as you point out above about browser being the most vulnerable attack point.

Of course, this is the usual view about MBAM, and users fail to understand them with any sense or nuance.
I do understand that MB does not have the best engine nor top notch signatures. I also know that its behavioural detection is supbar, but I do trust its web protection.

I have a lifetime license, so why waste it?

AVG/Avast with Hardened Mode enabled is my second option.
 

Digmor Crusher

Level 24
Verified
Top Poster
Well-known
Jan 27, 2018
1,396
Its web protection is great, so it follows that is the main feature you rely on, as you point out above about browser being the most vulnerable attack point.

Of course, this is the usual view about MBAM, and users fail to understand them with any sense or nuance.
If someone were to use MB just for the web protection why not just use MB Browser Guard instead?
 
  • Like
Reactions: Divine_Barakah

oldschool

Level 84
Verified
Top Poster
Well-known
Mar 29, 2018
7,577
I do understand that MB does not have the best engine nor top notch signatures. I also know that its behavioural detection is supbar, but I do trust its web protection.

I have a lifetime license, so why waste it?

AVG/Avast with Hardened Mode enabled is my second option.
I think either I was not clear or you misunderstood me, but I totally agree with you. My remarks were about other, average users, or even some members.
 
  • Like
Reactions: Divine_Barakah

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top