enaph's PC Security Config · Setup v7
Updated Oct 4, 2026
My current setup
Shared as my personal configuration.
Updated Oct 4, 2026
My current setup
- Operating system: Windows 11
- OS version and support details: 25H2
- Real-time protection: Microsoft Windows Defender + CyberLock
- File and photo backups: OneDrive
- Device firewall: Microsoft Defender Firewall
- Browsers and extensions: Microsoft Edge + 1Password AdGuard Browser Assistent
- Main use of this computer: For home and private use
- On-device encryption: Windows BitLocker / Device Encryption
- Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
- Security updates: Allow security updates and latest features
- Update channels: Allow stable updates only
- User Account Control (UAC): Always notify
- Smart App Control: On
- Network firewall: Enabled
- Router and network details: Ziggo Sagemcom F3896LG
- Periodic malware scanners: HitmanPro
- Malware sample testing: I do not participate in malware testing
- Environment for malware testing: - Enables Smart App Control
- Enabled Controlled folder access
- Enabled Core Isolation
- Enabled the following ASR rules:
# Block executable content from email client and webmail
# Block Office applications from creating executable content
# Block Office applications from injecting code into other processes
# Block abuse of exploited vulnerable signed drivers
# Block execution of potentially obfuscated scripts
# Block JavaScript or VBScript from launching downloaded executable content
# Block Office applications from creating child processes
# Block Win32 API calls from Office macro
# Block credential stealing from LSASS
# Block Adobe Reader from creating child processes
# Block persistence through WMI event subscription
# Use advanced protection against ransomware
# Block all Office applications from creating child processes
# Block untrusted and unsigned processes running from USB
# Block executable files from running unless they meet a prevalence, age, or trusted list criterion - Secure DNS: AdGuard Private DNS
- Desktop VPN: AdGuard VPN
- Password and passkey manager: 1Password
- Two-factor authentication: 1Password
- Maintenance tools: System built-in tools
- Subscriptions: Microsoft 365 Premium
- System recovery: System built-in tools
- Usage and exposure: Visiting familiar websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions
- Computer specs: # Lenovo IdeaPad Slim 5 14IMH10
* Processor Options:
- Intel Core Ultra 9 185H (16C / 22T, up to 5.1 GHz, 24MB Cache)
* AI Engine / NPU:
- Intel AI Boost (up to 11 TOPS)
* Graphics:
- Integrated Intel Arc Graphics
* Memory:
- 2x 8GB DDR5-5600 MHz SO-DIMM
* Storage:
- 512GB M.2 PCIe 4.0 x4 NVMe SSD
* Display Options (14.0", 16:10 aspect ratio):
- WUXGA (1920 x 1200) IPS, 300 nits, 60Hz, 45% NTSC, Anti-glare
* Audio & Webcam:
- Stereo speakers, 2W x 2, Dolby Audio
- FHD (1080p) webcam with privacy shutter & dual-array microphones
- IR Camera / ToF sensor for Windows Hello (select models)
* Connectivity:
- Wi-Fi 6 (802.11ax 2x2) / Wi-Fi 6E
- Bluetooth 5.2 / 5.3
* I/O Ports:
- 2x USB-C (USB 10Gbps, USB Power Delivery 3.0, DisplayPort 1.4)
- 1x USB-A (USB 5Gbps, Always On)
- 1x USB-A (USB 5Gbps)
- 1x HDMI
- 1x MicroSD card reader
- 1x 3.5mm Headphone / Microphone combo jack
* Battery & Power:
- Integrated 60Wh battery
- 65W USB-C power adapter (supports Rapid Charge Boost)
* Design & Build:
- Chassis: Aluminum top and bottom
- Dimensions: 313.4 x 222 x 16.9 mm (12.34 x 8.74 x 0.67 inches)
- Weight: Approx. 1.47 kg (3.24 lbs)
- Color: Luna Grey
* Operating System:
- Windows 11 Pro - Feedback preference: Showcase only - no advice requested