Hard_Configurator - Windows Hardening Configurator

[Andy Ful]

Maybe something like that?

 

[Vasudev]

Maybe something like that?

View attachment 204603

Something like these:

 

[imuade]

My suggestion

 

[upnorth]

Maybe try contact @MikeV? Is one of few graphic designers I know about here on MT.

 

[Vasudev]

My suggestion

View attachment 204760

Common users will think ConfigureDefender is a ransomware and they will learn the truth after joining MT that Hardeners are tools for Default Deny and keeps malwares out of the system.

 

[Andy Ful]

I have got the message from @askalan, that he wants to support the Hard_Configurator project by creating the dedicated domain and web page. So, the domain hard-configurator.com will be directed to the dedicated webpage with some important information about Hard_Configurator. The web page will be finished soon. At this moment the domain hard-configurator.com is connected to the GitHUB webpage.
The photos:

Thanks @askalan. Good work.

 

[shmu26]

Thanks @askalan !!!

 

[AlanOstaszewski]

This is not yet the final state of the website I will try to make the website more interactive with screenshots and more. So I still have a lot planned!

Only I have a small question about the texts. Maybe a native speaker has time to read and correct the texts? I would be very happy about it and very grateful! The person should contact me via PM (I will send you the text in text form). I would also be able to credit the person on the website (only if it is ok)!

 

[Burrito]

Very cool.

Thank you to @Andy Ful for the great product.

And thank you to @askalan for taking the initiative to give the product its own portal.

Good work MT Team.

 

[oldschool]

I don't see the website connection at @Andy Ful's GitHub site.

 

[AlanOstaszewski]

I don't see the website connection at @Andy Ful's GitHub site.

Hello! The domain is very young so that's normal. You're using a DNS server that takes a long time to update.

It is not bad, because the website will be available for you within the next few days.

If you don't want to wait, you can also use the Cloudflare DNS server (1.1.1.1 [the Cloudflare DNS server is my recommendation]) or the one from Google (8.8.8.8).

 

[Andy Ful]

Thanks to askalan, we can see some new tests on Malware Hub, and it looks like the samples were not known to WD or WD was disabled. All samples were blocked by SmartScreen (via Run As SmartScreen) or by H_C settings.
https://malwaretips.com/threads/malware-6-dynamic-detection.89091/post-788503
https://malwaretips.com/threads/malware-triple-action-05-01-2018-dynamic-detection.89141/post-788935
https://malwaretips.com/threads/blackheart-ransomware-dynamic-detection.89169/post-789116
https://malwaretips.com/threads/hard_configurator-january-2019-report.89172/

If I correctly remember, we discussed several months ago, the possibility of using only H_C (with forced SmartScreen) without any other realtime AV. That would be a very light protection based on default-deny SRP and forced SmartScreen. In my opinion, the results on Malware Hub should be as good as for any decent AV, but in the real world the protection can be slightly lower (as good as for a free AV). It follows from the below fact:

1. Some advanced 0-day attacks which can possibly bypass H_C recommended settings (very usable, but not maximally strong), can be detected by AV signatures after some days.
2. Some popular legal applications with bundled commercial adware, can also bypass the SmartScreen protection, so the user should add the adware cleaner to his/her setup.

Though, such events will be rather improbable in the home environment.

Edit.
Added point 2. which is more probable than point 1.

 

[AlanOstaszewski]

and it looks like the samples were not known to WD or WD was disabled.

Hello, I am currently testing Hard_Configurator without Windows Defender. And it will probably stay that way.

 

[shmu26]

Some advanced 0-day attacks which can possibly bypass H_C recommended settings (very usable, but not maximally strong), can be detected by AV signatures after some days.
Though, such events will be rather improbable in the home environment.

Protection from these attacks will be better with blocked sponsors?

 

[Andy Ful]

Protection from these attacks will be better with blocked sponsors?

Yes, but you will probably never see such attack on your computer.

 

[oldschool]

Most excellent. Thanks to all of you for your efforts in this thread. Really top-notch! This is one of my main threads to follow.

BTW: I'm experimenting once again with H_C since I moved all of our files to our SUA from Admin (a holdover from 2017). I had uninstalled H_C because I previously had neglected to make this change. So I am now trying H_C & WD with VoodooShield in the more user-friendly Auto Mode & Moderate Security Posture. This is still probably overkill but since I copied all our files over it is not currently presenting the problems my wife had previously with H_C.

 

[Andy Ful]

What was her main problem with H_C?

 

[Vasudev]

Most excellent. Thanks to all of you for your efforts in this thread. Really top-notch! This is one of my main threads to follow.

BTW: I'm experimenting once again with H_C since I moved all of our files to our SUA from Admin (a holdover from 2017). I had uninstalled H_C because I previously had neglected to make this change. So I am now trying H_C & WD with VoodooShield in the more user-friendly Auto Mode & Moderate Security Posture. This is still probably overkill but since I copied all our files over it is not currently presenting the problems my wife had previously with H_C.

I hid Configure Defender in my sister's lappie since her PC was becoming a villa of malwares. Its hidden deep within directories.

 

[shmu26]

My wife doesn't know it is on her laptop, and I don't think I could even explain to her what it is.

 

[oldschool]

What was her main problem with H_C?

I previously had shortcuts on SUA pointed to files on Admin account and it created some problem with making changes to those, if I remember correctly. The problem was really that all of our files were previously on Admin Account from the time we purchased the laptop years ago. When I created SUA approx. a year ago I neglected to move those to SUA and it made H_C more complicated than need be. I solved this not long ago simply by moving everything to SUA. Voila! Problem solved.

I am now using Windows10_Recommended_Enhanced Profile as well.