Unverified enaph's PC Security Config

[enaph]

enaph's PC Security Config · Setup v7
Updated Oct 4, 2026

My current setup

• Operating system: Windows 11
• OS version and support details: 25H2
• Real-time protection: Microsoft Windows Defender + CyberLock
• File and photo backups: OneDrive
• Device firewall: Microsoft Defender Firewall
• Browsers and extensions: Microsoft Edge + 1Password AdGuard Browser Assistent

Spoiler: More configuration details

• Main use of this computer: For home and private use
• On-device encryption: Windows BitLocker / Device Encryption
• Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: On
• Network firewall: Enabled
• Router and network details: Ziggo Sagemcom F3896LG
• Periodic malware scanners: HitmanPro
• Malware sample testing: I do not participate in malware testing
• Environment for malware testing: - Enables Smart App Control
  - Enabled Controlled folder access
  - Enabled Core Isolation
  - Enabled the following ASR rules:
  # Block executable content from email client and webmail
  # Block Office applications from creating executable content
  # Block Office applications from injecting code into other processes
  # Block abuse of exploited vulnerable signed drivers
  # Block execution of potentially obfuscated scripts
  # Block JavaScript or VBScript from launching downloaded executable content
  # Block Office applications from creating child processes
  # Block Win32 API calls from Office macro
  # Block credential stealing from LSASS
  # Block Adobe Reader from creating child processes
  # Block persistence through WMI event subscription
  # Use advanced protection against ransomware
  # Block all Office applications from creating child processes
  # Block untrusted and unsigned processes running from USB
  # Block executable files from running unless they meet a prevalence, age, or trusted list criterion
• Secure DNS: AdGuard Private DNS
• Desktop VPN: AdGuard VPN
• Password and passkey manager: 1Password
• Two-factor authentication: 1Password
• Maintenance tools: System built-in tools
• Subscriptions: Microsoft 365 Premium
• System recovery: System built-in tools
• Usage and exposure: Visiting familiar websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
• Computer specs: # Lenovo IdeaPad Slim 5 14IMH10
  
  * Processor Options:
  - Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
  * AI Engine / NPU:
  - Intel AI Boost (up to 11 TOPS)
  * Graphics:
  - Integrated Intel Arc Graphics
  * Memory:
  - 2x 8GB DDR5-5600 MHz SO-DIMM
  * Storage:
  - 512GB M.2 PCIe 4.0 x4 NVMe SSD
  * Display Options (14.0", 16:10 aspect ratio):
  - WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
  * Audio & Webcam:
  - Stereo speakers, 2W x 2, Dolby Audio
  - FHD (1080p) webcam with privacy shutter & dual-array microphones
  - IR Camera / ToF sensor for Windows Hello (select models)
  * Connectivity:
  - Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
  - Bluetooth 5.2 / 5.3
  * I/O Ports:
  - 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
  - 1x USB-A (USB 5Gbps, Always On)
  - 1x USB-A (USB 5Gbps)
  - 1x HDMI
  - 1x MicroSD card reader
  - 1x 3.5mm Headphone / Microphone combo jack
  * Battery & Power:
  - Integrated 60Wh battery
  - 65W USB-C power adapter (supports Rapid Charge Boost)
  * Design & Build:
  - Chassis: Aluminum top and bottom
  - Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
  - Weight: Approx. 1.47 kg (3.24 lbs)
  - Color: Luna Grey
  * Operating System:
  - Windows 11 Pro
• Feedback preference: Showcase only - no advice requested

Shared as my personal configuration.