SECURITY: Complete Fallen's Security Config 2020

Last updated
Oct 28, 2020
About device
Primary device
Operating system
Sign-in identity
Sign-in with Microsoft account
Log-in security
    • None
Permissions
Administrator user account
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Malware samples
No - malware is not downloaded
Firewall protection
Microsoft Defender Firewall
Real-time malware protection
Microsoft Defender Antivirus
GlassWire Elite
RTP & OS hardening settings
Automatic sample submission: Off
Actually I don't need an antivirus.
Periodic scanning
MBAM, EEK and NPE.
Browsers
Microsoft Edge - AdGuard AdBlocker, AdGuard Extra, Bitwarden and Full Page Screen Capture.
Optimisation apps
Windows Tools and SysHardener Portable.
My Files & Photos backup
WD My Book 3TB
My Files backup schedule
Manual - specific days to the cloud, or local attached storage
Device recovery & settings
Macrium Reflect
Device backup schedule
Computer specifications
CPU: AMD Ryzen 7 2700X
RAM: Corsair Vengeance 16GB DDR4
SSD: WD Green 240GB
GPU: MSI Geforce GTX1080
MBA: MSI X470 Gaming M7 AC
PSU: Corsair TX850M 850W
Device activity usage
  1. Computer games
  2. Financial and sensitive documents
  3. Generic web browsing
  4. Streaming audio and video content from the Internet
  5. Downloading files from unfamiliar sites
  6. Working from home

FALLEN

Level 2
Feb 13, 2015
90
Hi,
This my security configuration for 2020, probably 2021 too. :D

Also I made my own WireGuard VPN server. Spending my free credit...

WireGuard + Pi-Hole (3 million blacklist entries) + Unbound.

pi-hole-admin-index.png query-log.png
 

plat1098

Level 22
Verified
Sep 13, 2018
1,194
I have similar hardware specifications to yours. I'm highly interested in an rtx 3070 of some kind but it's been such a circus and at times, a rip-off with these other 3xxx. So, I'm hoping my gtx 1080 FE hangs in there for a while longer--when supply comes closer to demand. 😬 They're nice gpus, though, for being 4.5 years old now.
 

SecurityNightmares

Level 31
Verified
Jan 9, 2020
2,054
Pi-Hole (3 million blacklist entries) + Unbound
I use that combination too in the past but switch to NextDNS as PiHole can't do that NextDNS provide.
Also 3 million is just overblocking.

Password manager: KeePass Portable.
For security reason you should use install version so its protected with UAC.

Actually I don't need an antivirus.
I would say you need. I don't see any Default-Deny or other SRP protection in your setup so you should take a look at Hard_Configurator from Andy.
Else good setup
 

FALLEN

Level 2
Feb 13, 2015
90
I have similar hardware specifications to yours. I'm highly interested in an rtx 3070 of some kind but it's been such a circus and at times, a rip-off with these other 3xxx. So, I'm hoping my gtx 1080 FE hangs in there for a while longer--when supply comes closer to demand. 😬 They're nice gpus, though, for being 4.5 years old now.
I just changed SSD. Thats my change. 😀 About RTX's, Xbox Series X says no to me.

I use that combination too in the past but switch to NextDNS as PiHole can't do that NextDNS provide.
Also 3 million is just overblocking.
I know NextDNS, good choice too. About overblocking, thats your experience maybe. I'm pretty comfortable with that, also I have many whitelists.

For security reason you should use install version so its protected with UAC.
Just keeping my notes. Not important things. Thanks. 👍

I would say you need.
Thank you for your concern.

I don't see any Default-Deny or other SRP protection in your setup so you should take a look at Hard_Configurator from Andy.
OK, but I don't need Default-Deny, SRP or Hard_Configurator too.
 
Top