Advanced Plus Security Divine_Barakah's PC Security Config 2026

Last updated
Jul 4, 2026
How it's used?
For work or educational use
Operating system
Windows 11
On-device encryption
BitLocker Device Encryption for Windows
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates
Update channels
Allow stable updates only
User Access Control
Always notify
Smart App Control
Evaluation mode
Network firewall
Enabled
About WiFi router
ISP-provided router.
Real-time security
Webroot Internet Security Plus
NVT OSArmor Personal
Firewall security
Other - Internet Security (3rd-party)
About custom security
* Webroot
- protected settings with a password
- increased heuristics sensitivity
- changed firewall settings to ask for unknown applications

*OSArmor
- Default settings for now.
Periodic malware scanners
EEK
Malware sample testing
I do not participate in malware testing
Environment for malware testing
I don't do malware testing.
Browser(s) and extensions
Browsers
1- Vivaldi with multiple profile
2- Helium

Extensions
1- Floccus
2- Password Boss
3- Endnote
Secure DNS
Adguard Private DNS set in Win 11 settings and in browsers.
Desktop VPN
Adguard VPN
Password manager
Password Boss (main)

Enpass (backup)
Maintenance tools
Smarty Uninstaller
Kerish Doctor
Dell Command Update Universal
Hard Disk Sentinel Pro Portable
Bleachbit
Hibit Uninstaller
File and Photo backup
Koofr (Cryptomator)
Filejump (Cryptomator)
Cyberduck
Subscriptions
    • Google One AI Premium 2TB
System recovery
AOMEI Backupper Pro
Risk factors
    • Browsing to popular websites
    • Browsing to unknown / untrusted / shady sites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Logging into my bank account
    • Downloading software and files from reputable sites
Computer specs
Dell Latitude 7450
Ultra 7 155U
16 GB DDR5 Ram 6400
1TB Micron nVMe Gen4
Notable changes
Webroot and the inclusion of OSArmor.
Changed main password manager
Ditched Kerish Doctor
Managing Windows updates through GP.
What I'm looking for?

Looking for maximum feedback.

Could you please go to

DNS leak test on both browsers and check.
Brave
1784140547836.png


Edge

1784140566897.png
 
I am doing the dirty work. I am reinstalling Windows. I blocked driver updates from WU by editing the registry (I created 4 reg keys in cmd) during Windows installation. I don't want WU to install generic drivers.

For now I am keeping NKT OSA. I still have not decided about Webroot yet.

One more thing, I ditched AOMEI for O&o Diskimage 21 Premium.

Now I am downloading 1.8GB of drivers using Dell Command Update.
 
It seems I will install the following.

1- MD (default settings)
2- WFC
3- NVT OSA

Still have not decided what to use for web protection
I know I can enable MD Web protection, but I will skip it. Instead, I will either use BDTL, or just harden my Adguard DNS.
 
How to enable MD web protection, and how to harden your AdGuard DNS?
To enable MD Network Protection

Set-MpPreference -EnableNetworkProtection Enabled

As for Adguard DNS hardening, I am researching the following to add to Adguard lists
1- HaGeZi - Threat Intelligence Feeds
2- HaGeZi - Multi PRO
3- Dandelion Sprout's Anti-Malware List
 

You may also like...