Advanced Plus Security Gandalf_The_Grey's Security Configuration for 2019

[Gandalf_The_Grey]

Thanks @Moonhorse and @thrillskr I will try PrivaZer as alternative for CCleaner

 

[stefanos]

Thanks @Moonhorse and @thrillskr I will try PrivaZer as alternative for CCleaner

I am sure you are comeback to ccleaner

 

[Gandalf_The_Grey]

I am sure you are comeback to ccleaner

Who knows, but for now PrivaZer works
Keep both on my system for a while and I will decide after that time.

 

[Gandalf_The_Grey]

Windows Defender blocked the safe links feature of outlook.com

Spoiler: blocked link

Brand voorkomen

So I'm back to Kaspersky free antivirus with the performance tweaks from @Evjl's Rain and don't decrypt EV certificates.
Keeping the latest Hard Configurator Beta with Windows 10 Recommended Enhanced profile.
Still not decided between CCleaner Pro and PrivaZer Donors version, but slowly using PrivaZer more and more

 

[Moonhorse]

Windows Defender blocked the safe links feature of outlook.com

Spoiler: blocked link

Brand voorkomen

So I'm back to Kaspersky free antivirus with the performance tweaks from @Evjl's Rain and don't decrypt EV certificates.
Keeping the latest Hard Configurator Beta with Windows 10 Recommended Enhanced profile.
Still not decided between CCleaner Pro and PrivaZer Donors version, but slowly using PrivaZer more and more

For me kaspersky does block it, and this is with harlans settings (cloud)

 

[Gandalf_The_Grey]

View attachment 213808

For me kaspersky does block it, and this is with harlans settings (cloud)

No block for me Will submit the url to Kaspersky to be sure...

VirusTotal

VirusTotal

www.virustotal.com

 

[harlan4096]

KTS2020TRa not blocking that URL...

 

[Gandalf_The_Grey]

I did a reset / clean install on my laptop with windows 10 1903 and I'm going for an almost all Microsoft config.
Office 365 Home installed through the Microsoft Store.
Edge Dev as daily browser with uBlock Origin and LastPass.
Foxit Reader for PDF with Protected View for all files, JavaScript disabled and Safe Reading Mode enabled.
Bandizip for handeling zip files while keeping the mark of the web.
PrivaZer as cleaner. They will support the new Chromium based Edge as soon as there is a stable version.

 

[FrFc1908]

Hi Gandalf thanks for sharing your config. It looks good! I saw FirewallHardening 1.0.0.0 what is this exactly, but more important, where can you download it?

 

[Gandalf_The_Grey]

Hi Gandalf thanks for sharing your config. It looks good! I saw FirewallHardening 1.0.0.0 what is this exactly, but more important, where can you download it?

Hi Mr.Wave Thank you
FirewallHardening is a new toy from @Andy Ful and will probably be integrated in Hard_Configurator.
Info about this tool is on the last 3 pages of the Hard_Configurator thread, starting here: Discuss - Hard_Configurator - Windows Hardening Configurator
You can also download it from here: AndyFul/Hard_Configurator

 

[oldschool]

I did a reset / clean install on my laptop with windows 10 1903 and I'm going for an almost all Microsoft config.
Office 365 Home installed through the Microsoft Store.
Edge Dev as daily browser with uBlock Origin and LastPass.
Foxit Reader for PDF with Protected View for all files, JavaScript disabled and Safe Reading Mode enabled.
Bandizip for handeling zip files while keeping the mark of the web.
PrivaZer as cleaner. They will support the new Chromium based Edge as soon as there is a stable version.

Very nice setup. I may have to ditch Wise when Privacy Eraser brings support for Edge Chromium. I had trouble adjusting to its UI, but I may need to give it more time. I wish they'd bring a "clear all browsing data on exit" feature to new Edge. You'd think they would since its in old version.

 

[Gandalf_The_Grey]

Thanks Kees @Windows_Security for the mentioning of Exploit Protection for Edge Dev (to be used only if you don't use an Anti-Virus, Anti-Exploit or AdBlocker which injects its code (a DLL) into the browser)

Very nice setup. I may have to ditch Wise when Privacy Eraser brings support for Edge Chromium. I had trouble adjusting to its UI, but I may need to give it more time. I wish they'd bring a "clear all browsing data on exit" feature to new Edge. You'd think they would since its in old version.

Thanks, I sent an email to The PrivaZer Team asking if they would support Edge Dev and they replied:

As soon as there is an official release of Chrome based Edge.
Not sure we will support dev channel.

But I think and hope that other cleaners will do the same.

Is the option "Keep local data only until you quit your browser" not the same as "clear all browsing data on exit"?

 

[FrFc1908]

Hi Mr.Wave Thank you
FirewallHardening is a new toy from @Andy Ful and will probably be integrated in Hard_Configurator.
Info about this tool is on the last 3 pages of the Hard_Configurator thread, starting here: Discuss - Hard_Configurator - Windows Hardening Configurator
You can also download it from here: AndyFul/Hard_Configurator

Graag gedaan landgenoot! And thank you for the links! I guess with all those toys that @Andy Ful created you can feel very safe on a windows native security setup! One more thing to say to the bad guys then ;

 

[Gandalf_The_Grey]

Graag gedaan landgenoot! And thank you for the links! I guess with all those toys that @Andy Ful created you can feel very safe on a windows native security setup! One more thing to say to the bad guys then ;

View attachment 214181

Yes, it's great to have a native windows security setup and being able to not have to rely on third party security programs.
A good security config is a delicate balance, between adding layers and overkill.
Also through participating in those threads, asking questions I learned a lot about windows native security mechanisms.
I can't thank @Andy Ful @Windows_Security (andere landgenoot) @shmu26 and all the other members participating enough.
Still learning every day

 

[oldschool]

Also through participating in those threads, asking questions I learned a lot about windows native security mechanisms.
I can't thank @Andy Ful @Windows_Security (andere landgenoot) @shmu26 and all the other members participating enough.
Still learning every day

Precisely my experience and the reason for following/participating in that thread. We owe much to those with more experience!

 

[blackice]

Watching the development of your native Windows config and learning from @Andy Ful lead to me going back to Defender. You @shmu26 @Windows_Security and @oldschool ask really good questions that @Andy Ful answers with great insight concerning WD and C_D. This board is a treasure trove of information for really good free security information.

 

[Andy Ful]

Thanks for the questions.

 

[Gandalf_The_Grey]

Thanks for the questions.

Thank you for your great programs, patience and support!

 

[shmu26]

Thank you for your great programs, patience and support!

+1

 

[Gandalf_The_Grey]

Re-added O&O ShutUp10 .
Removed LastPass
Added Bitwarden
Bitwarden seems too be more trusted nowadays and trust matters when using a password manager.
Exporting form LastPass and importing in Bitwarden went great with the recommended LastPass Pocket application:

There are known bugs (for years now) with the LastPass exporter regarding special characters such as the ampersand (&), the greater than sign (>), and the less than sign (<). The LastPass exporter may change (HTML encode) these and possibly other special characters in your passwords to their respective HTML encoded values (ex. &amp;, &gt;, and &lt. If this LastPass bug affects your exported data you should use a text editor (such as Notepad) to find and replace all of these values before importing into Bitwarden. For example, you may want to do a find and replace for &amp; → & and &lt; → <).
Alternatively, you can use the LastPass Pocket application to export your CSV data. The LastPass Pocket application does not appear to be affected by these bugs.

I enabled Windows Defender Sandbox by running:

setx /M MP_FORCE_USE_SANDBOX 1