Advanced Plus Security Divine_Barakah's Second Laptop Security Config

[Divine_Barakah]

Hello,


I have got a new Lenovo Thinkpad X13 Gen 3 and I use it for teaching.

I am keeping the config as simple as possible.

 

[Parkinsond]

Hello,


I have got a new Lenovo Thinkpad X13 Gen 3 and I use it for teaching.

I am keeping the config as simple as possible.

Congratulations for your new laptop.

Trend Micro detection rate is very good, but it is bundled with very high FP detections; might cause some annoyance with less prevalent installers or script files.

Fort firewall allows more precise control than W firewall; however, firewall, regardless of how good is it, can be easily bypassed by code injection into an allowed system exe or process.

Apart from those two, the rest of configuration is very good.

 

[Divine_Barakah]

Congratulations for your new laptop.

Trend Micro detection rate is very good, but it is bundled with very high FP detections; might cause some annoyance with less prevalent installers or script files.

Fort firewall allows more precise control than W firewall; however, firewall, regardless of how good is it, can be easily bypassed by code injection into an allowed system exe or process.

Apart from those two, the rest of configuration is very good.

Thanks man.

Regarding FPs, it won't be an issue as I mainly use this device for teaching which means I am only using some well-known apps (very essential ones).

Regarding WF, TM already have Firewall booster and I do trust the BB in TM, so I believe that is covered in my setup. Hypersensitive mode will help too.

 

[Parkinsond]

I mainly use this device for teaching

We are colleagues; my kit is MS Office and previously SPSS.

 

[Moonhorse]

I havent had single fp on trend micro, with hyper sensitive enabled for months. even it has run on my sisters laptop for over year, and she works alot with files.

Sure it has some false positives when you test against 10000 files compared to other antiviruses

 

[Divine_Barakah]

I havent had single fp on trend micro, with hyper sensitive enabled for months. even it has run on my sisters laptop for over year, and she works alot with files.

Sure it has some false positives when you test against 10000 files compared to other antiviruses

I am impressed with how light it is on system resources.

 

[Divine_Barakah]

A new feature in TM

 

[Trident]

A new feature in TM

View attachment 294831

Not very new, it’s been almost a year since they released it.

It uses the same technology like folder shield to protect your AI agents and IDEs (things like ChatGPT Codex, Claude Code and so on) and their respective output from malicious modifications.

It is like anti-ransomware for your source code.

It is light on system resources indeed, for the 2026 they seem to have made several updates to the application lightness.

But in terms of detection, it is lagging behind others.

 

[Parkinsond]

A new feature in TM

View attachment 294831

Some sort of AI-specific app control.

 

[Divine_Barakah]

@Trident what do you think of TM's Firewall Booster? I see that it offers IDS, Anti-botnet protection and Generic Stream Scan.

 

[Divine_Barakah]

Update:

Though TM is very light on system resources, it does severely slow down installing applications when hypersensitive mode is enabled.

On the other hand, it does not slow down browsing nor downloading files. It also does not slow down system startup.

 

[Parkinsond]

it does not slow down browsing

Has https scanning?

 

[Trident]

@Trident what do you think of TM's Firewall Booster? I see that it offers IDS, Anti-botnet protection and Generic Stream Scan.

It all sounds very nice but the IDS only blocks a handful of attacks through a pattern that was last updated ~2 years ago.

This IDS is not the same IDS offered by business products.

The business version can block system-wide connection to untested domains and IPs whilst the home one only blocks connection to known malicious.

The hypersensitive mode enables totally different configuration for all engines, but as it has been proven, even this connection is ok until you start playing around with malware.

It does have HTTP scanning.

McAfee’s execution of the cloud-based concept is way better than the one found in Trend.

 

[Parkinsond]

This IDS is not the same IDS offered by business products

Even that of business products is not that great; SEP IPS was good but not impressive.

It does have HTTP scanning

without "s"?

 

[Miravi]

When you long for a light and simple antivirus like me, Trend Micro has a lot of attractive qualities. I do enjoy their branding and sense for UX design, and the idea of a well-executed cloud antivirus can be very promising.

Unfortunately, I haven't had enough assurances of its actual ability to detect and protect. I'll still watch for improvements.

 

[Divine_Barakah]

When you long for a light and simple antivirus like me, Trend Micro has a lot of attractive qualities. I do enjoy their branding and sense for UX design, and the idea of a well-executed cloud antivirus can be very promising.

Unfortunately, I haven't had enough assurances of its actual ability to detect and protect. I'll still watch for improvements.

I believe unless you hunt for malware, you'd be OK with it.

 

[Trident]

Correction, it supports HTTPS scanning, I’ve missed the S.

Between Trend Micro and McAfee, both cloud based, one has a massive network, the other one performs regular network cleanup.

McAfee is also updated more often, it has less roots in kernel mode than Trend, the web blocking is somewhat better executed.

Trend Micro beats in terms of UX, in fact, I’ve learned some lessons from them myself.

 

[Jonny Quest]

I believe unless you hunt for malware, you'd be OK with it.

Same way I feel about F-Secure.

 

[Divine_Barakah]

Same way I feel about F-Secure.

Personally I love F-Secure but unfortunately it is blocked in Egypt.

 

[Victor M]

but unfortunately it is blocked in Egypt.

If the government blocks it and considers it a threat, it must tbe doing something right.