Hard_Configurator - Windows Hardening Configurator

Chri.Mi said:
@Andy Ful Can u do something about it?
Click to expand...
I have sent the email to Symantec
SecurityResponse.Symantec@broadcom.com

Could you please, send-back the final information about this submission? Usually, I had such information in two days (I submitted the files over two weeks ago).
There is also another problem. The customers report that the digital certificate of Hard_Configurator executables is wrongly recognized as invalid (see the attachment).
Thank you.
H_C_invalidCS.PNG
 
  • Like
Reactions: Protomartyr and ForgottenSeer 85179
Yes, its kind of a ask all firewall, i does not care if its signed etc and theres no learning mode, because of its unmaged client firewall.
Tried to assoc .hta -> to open notepad. It works, but if you do command prompt mshta c:\temp\malware.hta it runs and makes an outbound connection and SEP firewall alerted it.
NVT Registry Guard seems to be pretty good infact, i've protected wscript registry key and some autorun entries that Spyshelter Free HIPS does not.

Regards,
-sepi
 
  • Like
Reactions: Andy Ful
Andy Ful said:
I have sent the email to Symantec
SecurityResponse.Symantec@broadcom.com

Could you please, send-back the final information about this submission? Usually, I had such information in two days (I submitted the files over two weeks ago).
There is also another problem. The customers report that the digital certificate of Hard_Configurator executables is wrongly recognized as invalid (see the attachment).
Thank you.
View attachment 241405
Click to expand...
Is not Symantec, is Mcafee
 
  • Like
Reactions: Andy Ful
sepik said:
...
Tried to assoc .hta -> to open notepad. It works, but if you do command prompt mshta c:\temp\malware.hta it runs and makes an outbound connection and SEP firewall alerted it.
NVT Registry Guard seems to be pretty good infact, i've protected wscript registry key and some autorun entries that Spyshelter Free HIPS does not.

Regards,
-sepi
Click to expand...
You can simply block mshta via the H_C <Block Sponsors> option. Please note, that this will prevent whitelisting HTA files.
Anyway, it is not necessary when you use the H_C Recommended Settings, because these settings will prevent the command-lines like "mshta c:\temp\malware.hta".
 
  • Like
  • +Reputation
Reactions: simmerskool, Protomartyr, South Park and 5 others
  • Like
Reactions: simmerskool, Protomartyr, oldschool and 6 others
Chri.Mi said:
@Andy Ful
Andy i have a suggestion about hard configurator. I see almost all zones are covered. Do u think is possible after hard configurator, firewall hardening, configure defender and exploit protection, make a new step: hardening browsers (edge:flags)?
Click to expand...
I could do it If there was good documentation of these flags. Edge Chromium probably uses many of these flags (see the Default setting) and there is no information about how most flags can impact the browsing performance.
 
  • Like
Reactions: plat, simmerskool, Gandalf_The_Grey and 4 others
Digmor Crusher said:
But do you think that it would be something that you would want to spend your time on Andy? Would it be worthwhile?
Click to expand...
Yes, I think so. But, it is possible that Microsoft already uses those flags that increase security without much performance impact.
 
  • Like
Reactions: Protomartyr, simmerskool, Gandalf_The_Grey and 3 others
CurtisCantLose said:
browser flags are a moving target ... is ridiculous you will have to keep track of all the flags across multiple browsers in preview builds all that work for virtual zero security gain
Click to expand...
Yes, that is the danger of using flags without knowing how they exactly work and how they can impact the performance. Anyway, some of them can be probably useful.
 
Last edited:
  • Like
Reactions: simmerskool, South Park, Protomartyr and 4 others
  • Like
  • Applause
Reactions: Dave Russo, simmerskool, Andy Ful and 6 others
The questions I was talking about in my other thread here: Q&A - Windows Defender w/ Hitman Pro Alert?

1. Does H_C have an in-built updater or do we need to manually install new versions by downloading the new EXEs? If manual, do you need to uninstall the old H_C program before installing the new version or just run the new EXE and it will update the old H_C program?

2. The Windows_10_Basic_Recommended_Settings is one of the pre-built modes or a button you need to click in the GUI? I’m not necessarily an advanced user but I’m not new either. I love going into my AV settings and configuring all the details. I spent quite some time training my old AV’s (ESET) HIPs, opening firewall ports I needed open, etc. Basically, I’m not afraid to get my hands dirty; I just like having a guide to get me started.

3. Is H_C and all components (Configure Defender, Firewall Hardening, etc) completely open-source or partially?

Thank you in advance!

@Andy Ful
 
  • Like
Reactions: Protomartyr, plat, Andy Ful and 2 others
PotentialUser said:
1. Does H_C have an in-built updater or do we need to manually install new versions by downloading the new EXEs?
Click to expand...
Yes, for stable versions. No, for beta versions.
PotentialUser said:
If manual, do you need to uninstall the old H_C program before installing the new version or just run the new EXE and it will update the old H_C program?
Click to expand...
Install over the old version. Read the update info, follow update instructions.
PotentialUser said:
2. The Windows_10_Basic_Recommended_Settings is one of the pre-built modes ...
Click to expand...
Use <Load Profile> button to load the prebuild setting profile.
PotentialUser said:
3. Is H_C and all components (Configure Defender, Firewall Hardening, etc) completely open-source or partially?
Click to expand...
It is opensource.
 
  • Like
  • +Reputation
Reactions: South Park, ForgottenSeer 85179, Gandalf_The_Grey and 6 others

You may also like...