If I activate only the Firewall and the Windows Hardening sections in H_C, do I get about the same protection that I have with SysHardener ?
Hard_Configurator - Windows Hardening Configurator
- Thread starter Andy Ful
- Start date
By the Windows Hardening sections, I assume you mean the options on the right side, which are not related to SRP?
No, you will not get the same level of protection. SysHardener will block script files of various types, and to get that protection in H_C, you need to use SRP (the options on the left side)
As an addition to the post of @shmu26, the H_C FirewallHardening blocks more LOLBins.
If you want to get something similar to SysHardener (but stronger) you can use H_C and load the predefined profile: Windows_10_Basic_Recommended_Settings. This profile allows EXE and MSI files, so you probably will not see a difference in daily work.
H_C is much easier to switch on and off, in case you need to run a script file for a mainenance task or whatever, so that might be a difference.
Nice cred and mention for Andy here. I'm surprised this has not already been posted.... or did I miss it...
www.bleepingcomputer.com
Windows 10 Defender's hidden features revealed by this free tool
Windows 10's built-in Microsoft Defender antivirus solution has many advanced hidden features that allow you to customize how the security software works. Unfortunately, most people do not know these settings exist or even how to access them.
Gandalf_The_Grey
Level 85
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Forum Veteran
Yes, great to see more recognition of his amazing workNice cred and mention for Andy here. I'm surprised this has not already been posted.... or did I miss it...
Windows 10 Defender's hidden features revealed by this free tool
Windows 10's built-in Microsoft Defender antivirus solution has many advanced hidden features that allow you to customize how the security software works. Unfortunately, most people do not know these settings exist or even how to access them.
It was already posted in the Configure Defender thread:
ConfigureDefender utility for Windows 10/11
What triggers this command-line? Is it related to the WD task in the Task Scheduler? Look at the folder: C:\ProgramData\Microsoft\Windows Defender\Platform\ Is the version 4.18.2004.6-0 the last one? I have got it 21.04.2020, and my current version is 4.18.2005.4-0. Please try the command-line...
malwaretips.com
ConfigureDefender utility for Windows 10/11
You will probably see several instances of ConfigureDefender and maybe some other entries of unused/uninstalled applications. Nada. Nothing. Maybe it is my system configuration ... but it doesn't matter.
malwaretips.com
I've been reading all of @Andy Ful 's recommended links in H_C manual and I'm wanting to ask some general questions about SRP, except I'm still trying to wrap my head around some of the manual's explanation of H_C's inner mechanics. I guess it will just have to keep percolating in this old brain of mine ... 
My brain is young still...at least by numbers, and that stuff makes my head spin. I won’t implement SRP default deny until I understand what I’m doing. So it could be a while.I've been reading all of @Andy Ful 's recommended links in H_C manual and I'm wanting to ask some general questions about SRP, except I'm still trying to wrap my head around some of the manual's explanation of H_C's inner mechanics. I guess it will just have to keep percolating in this old brain of mine ...
Maybe I need the new casual user mode.
Well, I have W10 Pro so I'm learning how to deploy with GPO plus @Andy Ful 's expertise, but without his app.My brain is young still...at least by numbers, and that stuff makes my head spin. I won’t implement SRP default deny until I understand what I’m doing. So it could be a while.
Just for the fun of it!
Last edited:
You are on the right thread to ask.. and you have the right tool (H_C) to check the answers.I've been reading all of @Andy Ful 's recommended links in H_C manual and I'm wanting to ask some general questions about SRP,...
This probably will improve both your knowledge about SRP and the H_C manual.
It is possible for a simple SRP setup. The more complex setups require several hundreds of SRP rules.Well, I have W10 Pro so I'm learning how to deploy with GPO plus @Andy Ful 's expertise, but without his app.
I just set it to recommended settings for all three elements and let it do it's thing. I can learn about tweaking it when I get time to have a better read of the manual.
My setup is simple, more like @Windows_Security's Windows Pro Owner? Use SRP
As I got into this I realized more fully how much work you put into H_C. The casual user might think otherwise, that it's just a simple app. I imagine you had to do a lot of coding, and maybe hundreds of rules?
Yes. But, I like the final effect.
Andy, when do you expect the latest H_C beta to be good to go?
It is already good to go. Simply, there can be some unimportant bugs. There were also some, unimportant bugs in the version 5.0.0.0, that were corrected in the beta. Please read about the new <Update Mode>, <Harden Archives>, and <Harden Email Clients> features, because they make the Recommended Settings in the beta different from those in the ver. 5.0.0.0.
Hi Andy atm I'm trying the new 5.1. beta and so far no problems at all. Nice work.
When I looked in the manual I saw that you also mentioned "Font rescaling issues". A few month ago some kind soul told me that I could also try to fix it another way while still having my custom 125% for all other stuff. Maybe you could add that for other people desperate to stay at 125% while using H_C. I just used a picture since my explanation would only be more confusing (You have to try if application, system or system enhanced gives the best result). Not sure if it's only an windows 10 Pro option?
When I looked in the manual I saw that you also mentioned "Font rescaling issues". A few month ago some kind soul told me that I could also try to fix it another way while still having my custom 125% for all other stuff. Maybe you could add that for other people desperate to stay at 125% while using H_C. I just used a picture since my explanation would only be more confusing
(You have to try if application, system or system enhanced gives the best result). Not sure if it's only an windows 10 Pro option?
Last edited:
On my computer, this spoils the display. So, it may work only on some machines.Hi Andy atm I'm trying the new 5.1. beta and so far no problems at all. Nice work.
When I looked in the manual I saw that you also mentioned "Font rescaling issues". A few month ago some kind soul told me that I could also try to fix it another way while still having my custom 125% for all other stuff. Maybe you could add that for other people desperate to stay at 125% while using H_C. I just used a picture since my explanation would only be more confusing
View attachment 240935
So you start with an spoiled display which gets worse after these settings?
For me it changes a spoiled display to an normal looking one.
You may also like...
-
-
FAI Tells It Like It Is - Microsoft's Wonky Default Deny Roadmaps, Users as Guinea Pigs, "Dilemmas and Paradoxes," and Why SRP Remains King
- Started by ForgottenSeer 114717
- Replies: 44
-
Microsoft testing Windows 11 batch file security improvements- Started by Parkinsond
- Replies: 0
-
CrySome RAT : An Advanced Persistent .NET Remote Access Trojan- Started by Khushal
- Replies: 3
-
