Advanced Plus Security Emanuel Tomasin security config 2022

Last updated
Aug 25, 2021
How it's used?
For home and private use
Operating system
Windows 10
On-device encryption
Log-in security
    • Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
Security updates
Allow security updates and latest features
User Access Control
Notify me only when programs try to make changes to my computer
Smart App Control
Network firewall
Real-time security
Kas free+ SWH + stop_vaccine + Custom anti-exploit settings + OSArmor 1.4.3
Firewall security
Microsoft Defender Firewall
About custom security
SWH set to allow unsigned. SRP set to max with paranoid extensions.. Firewall Hardening all rules ON.
Periodic malware scanners
NPE
ESET Online Scanner
FRST
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
Edge: Malwarebytes browser guard + simple translate + ublock origin
Secure DNS
NextDNS
Desktop VPN
FastestVPN Lifetime subsciption on my router
Password manager
Bitwarden
Maintenance tools
none
File and Photo backup
6tb hdd and Onedrive 100GB plan.
System recovery
Macrium refelect free + Veeam Bakcup
Risk factors
    • Browsing to popular websites
    • Opening email attachments
    • Buying from online stores, entering banks card details
    • Logging into my bank account
    • Gaming
Computer specs
malwaretips.com

PC Specs - Emanuel Tomasin System Specs.

Hello I leave you my current pc that I chose myself the parts (many times asking for advice to those who know). BFV -60FPS 1920x1080.
malwaretips.com malwaretips.com
Notable changes
31/01/2022 Added stop_vaccine
10/02/2022 removed avira added f-secure safe.
10/02/2022 added windows 10 firewall control
10/02/2022 brave default browser
15/02/2022 upgrade to windows 11
27/02/2022 added windscribe
28/02/2022 added to Opera a lot of extensions, CCleaner
19/3/2022 removed fsecure safe added bitdefender free
21/03/2022 removed windscribe added wireguard
26/3/2022 removed windows 10 firewall control
18/04/2022 removed BD Free.
24/5/2022 added kaspersky free
1/06/2022 fresh installation of windows 10
12/06/2022 added H_C
24/08/2022 Removed H_C Added Kas free and SWH
25/08/2022 Added OSArmor 1.4.3
What I'm looking for?

Looking for medium feedback.

silversurfer

silversurfer

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,176
  • Like
Reactions: plat, [correlate], cryogent and 6 others
eonline

eonline

Level 21
Thread author
Verified
Well-known
Nov 15, 2017
1,064
  • Like
Reactions: [correlate], oldschool, Nevi and 4 others
eonline

eonline

Level 21
Thread author
Verified
Well-known
Nov 15, 2017
1,064
My custom antiexploit settings.

<?xml version="1.0" encoding="UTF-8"?>
<MitigationPolicy>
<SystemConfig>
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="false" HighEntropy="false" />
</SystemConfig>
<AppConfig Executable="7zFM.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="false" />
</AppConfig>
<AppConfig Executable="Acrobat.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="false" AuditEnableImportAddressFilter="false" EAFModules="AcroRd32.dll;Acrofx32.dll;AcroForm.api;" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="AcroRd32.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="false" AuditEnableImportAddressFilter="false" EAFModules="AcroRd32.dll;Acrofx32.dll;AcroForm.api;" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="AcroRd32Info.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="amdfendrsr.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="amdow.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="AMDRSServ.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="armsvc.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="atieclxx.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="atiesrxx.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="audiodg">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="basename.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="brave.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="false" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="chrome.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="cliqz.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="cscript.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="true" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="csrss.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="ctfmon.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="dfsvc.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="dllhost.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="Dwm.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="explorer.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="expr.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
<ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
<SEHOP Enable="false" TelemetryOnly="false" />
<Heap TerminateOnError="false" />
</AppConfig>
<AppConfig Executable="ExtExport.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="firefox.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="fltldr.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ImageLoad BlockRemoteImageLoads="true" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<ChildProcess DisallowChildProcessCreation="true" />
</AppConfig>
<AppConfig Executable="forfiles.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="grep.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
<ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
<SEHOP Enable="false" TelemetryOnly="false" />
<Heap TerminateOnError="false" />
</AppConfig>
<AppConfig Executable="HDSentinel.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="hh.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="HPSIsvc.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="ie4uinit.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="ieinstal.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="ielowutil.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="ieUnatt.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="iexplore.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="INFOPATH.EXE">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="java.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="javaw.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="javaws.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="lsass.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="C:\Windows\System32\lsass.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR BottomUp="false" HighEntropy="false" />
<ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
<SEHOP Enable="false" TelemetryOnly="false" />
<Heap TerminateOnError="false" />
</AppConfig>
<AppConfig Executable="lsm.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="LYNC.EXE">
<SystemCalls Audit="false" />
<DynamicCode Audit="false" />
<SignedBinaries Audit="false" AuditStoreSigned="false" />
<Fonts Audit="false" />
<ImageLoad AuditRemoteImageLoads="false" AuditLowLabelImageLoads="false" AuditPreferSystem32="false" />
<SEHOP Audit="false" />
<ChildProcess Audit="false" />
</AppConfig>
<AppConfig Executable="MacriumService.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="MpCmdRun.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="mscorsvw.exe">
<ExtensionPoints DisableExtensionPoints="true" />
</AppConfig>
<AppConfig Executable="msedge.exe">
<DEP Enable="true" EmulateAtlThunks="true" />
<ASLR ForceRelocateImages="true" RequireInfo="true" BottomUp="true" HighEntropy="false" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="msfeedssync.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="mshta.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="false" />
<StrictHandle Enable="true" />
<SystemCalls DisableWin32kSystemCalls="true" Audit="false" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="true" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="msiexec.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="msosync.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="MsSense.exe">
<StrictHandle Enable="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="mstsc.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<SystemCalls DisableWin32kSystemCalls="true" Audit="false" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="true" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="MTGO.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="true" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="ngen.exe">
<ExtensionPoints DisableExtensionPoints="true" />
</AppConfig>
<AppConfig Executable="ngentask.exe">
<ExtensionPoints DisableExtensionPoints="true" />
</AppConfig>
<AppConfig Executable="notepad.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
</AppConfig>
<AppConfig Executable="OfficeClickToRun.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="OIS.EXE">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="onedrive.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<ImageLoad BlockRemoteImageLoads="true" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
</AppConfig>
<AppConfig Executable="openssl.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="opera.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="OUTLOOK.EXE">
<SystemCalls Audit="false" />
<DynamicCode Audit="false" />
<SignedBinaries Audit="false" AuditStoreSigned="false" />
<Fonts Audit="false" />
<ImageLoad AuditRemoteImageLoads="false" AuditLowLabelImageLoads="false" AuditPreferSystem32="false" />
<Payload AuditEnableExportAddressFilter="false" AuditEnableExportAddressFilterPlus="false" AuditEnableImportAddressFilter="false" AuditEnableRopStackPivot="false" AuditEnableRopCallerCheck="false" AuditEnableRopSimExec="false" />
<SEHOP Audit="false" />
<ChildProcess Audit="false" />
</AppConfig>
<AppConfig Executable="peazip.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="PerfTune.exe">
<DEP Enable="false" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
<ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
<SEHOP Enable="false" TelemetryOnly="false" />
<Heap TerminateOnError="false" />
</AppConfig>
<AppConfig Executable="perl.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
</AppConfig>
<AppConfig Executable="plugin-container.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
</AppConfig>
<AppConfig Executable="plugin_host.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="powerpoint.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
</AppConfig>
<AppConfig Executable="PPTVIEW.EXE">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="PresentationHost.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="PrintDialog.exe">
<ExtensionPoints DisableExtensionPoints="true" />
</AppConfig>
<AppConfig Executable="python.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="qbittorrent.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="Radeonsoftware.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="RdrCEF.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="RdrServicesUpdater.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="reflectmonitor.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="ReflectUI.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="rm.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
<ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
<SEHOP Enable="false" TelemetryOnly="false" />
<Heap TerminateOnError="false" />
</AppConfig>
<AppConfig Executable="runtimebroker.exe">
<ExtensionPoints DisableExtensionPoints="true" />
</AppConfig>
<AppConfig Executable="script.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="SearchIndexer.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="sed.exe">
<ASLR ForceRelocateImages="false" RequireInfo="false" />
</AppConfig>
<AppConfig Executable="services.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="smss.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="sppsvc.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="steam.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="sublime_text.exe">
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="SumatraPDF.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="SystemSettings.exe">
<ExtensionPoints DisableExtensionPoints="true" />
</AppConfig>
<AppConfig Executable="taskeng.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="taskhost.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="thunderbird.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="uname.exe">
<DEP Enable="false" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
<ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
<SEHOP Enable="false" TelemetryOnly="false" />
<Heap TerminateOnError="false" />
</AppConfig>
<AppConfig Executable="VISIO.EXE">
<SystemCalls Audit="false" />
<DynamicCode Audit="false" />
<SignedBinaries Audit="false" AuditStoreSigned="false" />
<Fonts Audit="false" />
<ImageLoad AuditRemoteImageLoads="false" AuditLowLabelImageLoads="false" AuditPreferSystem32="false" />
<Payload AuditEnableExportAddressFilter="false" AuditEnableExportAddressFilterPlus="false" AuditEnableImportAddressFilter="false" AuditEnableRopStackPivot="false" AuditEnableRopCallerCheck="false" AuditEnableRopSimExec="false" />
<SEHOP Audit="false" />
<ChildProcess Audit="false" />
</AppConfig>
<AppConfig Executable="vlc.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
</AppConfig>
<AppConfig Executable="vmcompute.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<SystemCalls DisableWin32kSystemCalls="true" Audit="false" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="C:\WINDOWS\System32\vmcompute.exe">
<ControlFlowGuard Enable="true" SuppressExports="true" StrictControlFlowGuard="true" />
</AppConfig>
<AppConfig Executable="C:\WINDOWS\System32\vmwp.exe">
<ControlFlowGuard Enable="true" SuppressExports="true" StrictControlFlowGuard="true" />
</AppConfig>
<AppConfig Executable="wininit.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="winlogon.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="WinRAR.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ExtensionPoints DisableExtensionPoints="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="wksprt.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<SystemCalls DisableWin32kSystemCalls="true" Audit="false" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
<UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
</AppConfig>
<AppConfig Executable="WLIDSVC.EXE">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="WLIDSvcM.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" />
<SEHOP Enable="true" TelemetryOnly="false" />
</AppConfig>
<AppConfig Executable="wmic.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="WmiPrvSE.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
<AppConfig Executable="wmplayer.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<Payload EnableExportAddressFilter="false" EnableExportAddressFilterPlus="false" EnableImportAddressFilter="false" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
</AppConfig>
<AppConfig Executable="wordpad.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="false" />
<SystemCalls DisableWin32kSystemCalls="false" Audit="false" />
<ExtensionPoints DisableExtensionPoints="false" />
<DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="false" />
<SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="false" />
<Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="false" AuditLowLabelImageLoads="false" PreferSystem32="false" AuditPreferSystem32="false" />
<Payload EnableExportAddressFilter="true" EnableExportAddressFilterPlus="true" EnableImportAddressFilter="true" EnableRopStackPivot="true" EnableRopCallerCheck="true" EnableRopSimExec="true" />
<SEHOP Enable="true" TelemetryOnly="false" Audit="false" />
<Heap TerminateOnError="false" />
<ChildProcess DisallowChildProcessCreation="false" Audit="false" />
</AppConfig>
<AppConfig Executable="wscript.exe">
<DEP Enable="true" EmulateAtlThunks="false" />
<ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
<StrictHandle Enable="true" />
<SystemCalls DisableWin32kSystemCalls="true" Audit="false" />
<ExtensionPoints DisableExtensionPoints="true" />
<DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="true" Audit="false" />
<ControlFlowGuard Enable="true" SuppressExports="false" />
<SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="true" Audit="false" AuditStoreSigned="false" EnforceModuleDependencySigning="true" />
<Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
<ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
<Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
<SEHOP Enable="true" TelemetryOnly="false" />
<Heap TerminateOnError="true" />
<ChildProcess DisallowChildProcessCreation="true" Audit="false" />
</AppConfig>
</MitigationPolicy>
 
  • Like
  • Wow
Reactions: Nevi, Shadowra, Venustus and 5 others
eonline

eonline

Level 21
Thread author
Verified
Well-known
Nov 15, 2017
1,064
upgraded to windows 11

added anti-exploit configuration with the help of LOLBAS, blocking windows 10 firewall control after applying these restrictions are minimal.

My ubo config:
Screenshot_1.png

Static Filters: ! Block beacons, plugins and websockets everywhere ||*$ping,object,websocket ! Block potentially unsafe third-party content to unencrypted websites |HTTP://*$third-party,~document,~stylesheet,~image,~media ! Inject javascript to blur Google FLOC interest tagging *##+js(no-floc) ! Block switch to Chrome popop on google domains (search, maps, etc) ||ogs.google.*/widget/callout$all ! Block Google search URL paramater tracking ||google.*/search$removeparam=biw ||google.*/search$removeparam=bih ||google.*/search$removeparam=dpr ||google.*/search$removeparam=sa ||google.*/search$removeparam=source ||google.*/search$removeparam=aqs ||google.*/search$removeparam=sourceid ||google.*/search$removeparam=ei ||google.*/search$removeparam=gs_lcp ||google.*/search$removeparam=gclid ! youtube.com ||youtube.com/subscribe_embed?$third-party ||youtube.com/subscribe_widget$third-party youtube.com###alert-banner > .ytd-browse > .yt-alert-with-actions-renderer youtube.com###mealbar\:3 > ytm-mealbar.mealbar-promo-renderer youtube.com###notification-footer youtube.com###secondary-links youtube.com###yt-feedback youtube.com###yt-hitchhiker-feedback youtube.com###yt-lang-alert-container youtube.com##.yt-consent youtube.com##.ytd-banner-promo-renderer.style-scope.ytd-banner-promo-renderer-content youtube.com##.ytd-banner-promo-renderer.style-scope.ytd-banner-promo-renderer-background youtube.com##.ytd-primetime-promo-renderer youtube.com##.ytd-statement-banner-renderer youtube.com##.ytp-ce-playlist youtube.com##.ytp-pause-overlay youtube.com##.ytp-title-channel youtube.com##+js(json-prune, *.playerResponse.adPlacements) youtube.com##+js(json-prune, *.playerResponse.playerAds) youtube.com##+js(json-prune, 2.playerResponse.adPlacements playerResponse.adPlacements playerResponse.playerAds adPlacements playerAds) youtube.com##+js(json-prune, 2.playerResponse.adPlacements) youtube.com##+js(json-prune, playerResponse.adPlacements) youtube.com##+js(json-prune, playerResponse.playerAds) youtube.com##+js(set, ytInitialPlayerResponse.adPlacements, null) youtube.com##div[class^="ytd-consent"] youtube.com##ytd-popup-container > .ytd-popup-container > #contentWrapper > .ytd-popup-container[position-type="OPEN_POPUP_POSITION_BOTTOMLEFT"] youtube.com#@##consent-bump ||gstatic.com/youtube/img/promos/*.jpeg$image,domain=youtube.com ||*$beacon ||*$object
 

Attachments

  • Settings.xml.txt
    64.3 KB · Views: 146
Last edited by a moderator:
  • Like
Reactions: Nevi, oldschool, Venustus and 4 others
silversurfer

silversurfer

Level 85
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,176
Browsers, Search and Addons:
Opera + Ublock origin + simple translate + sciptsafe + feeedbro + font fingerpinnt defender + Feedbro + Avira safe browsing + AudioContext Fingerprint Defender + Free Avira Phantom VPN – Unblock Websites + Microsoft Defender Browser Protection + Secure Kit + WebGL Fingerprint Defender
Click to expand...
For my taste, this amount of browser addons: "overkill" but you @Emanuel Tomasin probably have reasons why you need most of them...
My suggestion, you may consider to remove certain addons for the same purpose like: either Avira Safe Browsing or Microsoft Defender Browser Protection.
 
  • Like
  • Thanks
Reactions: plat, amirr, [correlate] and 8 others
eonline

eonline

Level 21
Thread author
Verified
Well-known
Nov 15, 2017
1,064
silversurfer said:
For my taste, this amount of browser addons: "overkill" but you @Emanuel Tomasin probably have reasons why you need most of them...
My suggestion, you may consider to remove certain addons for the same purpose like: either Avira Safe Browsing or Microsoft Defender Browser Protection.
Click to expand...
thank you! Removed MS Defender browser protection.

Edit:I'm just testing since privacy is something I'm not interested in. Now my Opera browser is under four ip layers.
 
Last edited:
  • Like
  • HaHa
Reactions: [correlate], Nevi, Venustus and 3 others

Similar threads

eonline
    • Like
Advanced Security eonline security config 2024
Replies
11
Views
597
PC Setup Configuration Help & Showcase
simmerskool
simmerskool
Amnesia
    • Like
    • +Reputation
Advanced Security Amnesia laptop security config 2024
Replies
7
Views
439
PC Setup Configuration Help & Showcase
Berny
Berny
Alexandre Ravelli
    • Like
Advanced Plus Security Alexandre RAVELLI - Security Config 2024
Replies
1
Views
492
PC Setup Configuration Help & Showcase
Ink
Ink

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

Quick Navigation

Forum Rules Warning System Welcome Guide Two-factor Authentication

User Menu

Login

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top