Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 776277" data-attributes="member: 32260">A few days ago [USER=50782]@Windows_Security[/USER] posted the steps to install and forget default deny on Windows 10 with Windows Defender.<a href="https://malwaretips.com/threads/updated-12-11-2018-browser-extension-comparison-malwares-and-phishings.80915/post-775975" target="_blank">Q&amp;A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings</a>Some steps are automatically included when using Hard_Configurator, so I would like to show the easy way of making such a setup with H_C:<ol>
<li data-xf-list-type="ol">Install H_C (ConfigureDefender is already in H_C). Press &lt;ConfigureDefender&gt; button and apply &lt;Defender High&gt; settings. Close ConfigureDefender.</li>
<li data-xf-list-type="ol">Use &lt;Load Profile&gt; option in Hard_Configurator and apply &quot;Windows_10_Recommended_Enhanced&quot; profile. This profile already includes MSI tweak, blocks scripts and Remote Access, so no need to use Exploit Guard for wmic.exe, cscript.exe, rdpshell.exe and powershell.exe.</li>
<li data-xf-list-type="ol">Use &lt;Block Sponsors&gt; button to block mshta.exe and iexplore.exe. You can add more sponsors if required. If particular applications require HTA files, then do not block mshta.exe, but make the Firewall rule to block the Internet access for it.</li>
<li data-xf-list-type="ol">Configure your browser via 5 b) and c) steps included in [USER=50782]@Windows_Security[/USER] post. You can skip the 5 c) step if you like to use only Edge browser.</li>
</ol></blockquote>

[QUOTE="Andy Ful, post: 776277, member: 32260"] A few days ago [USER=50782]@Windows_Security[/USER] posted the steps to install and forget default deny on Windows 10 with Windows Defender. [URL='https://malwaretips.com/threads/updated-12-11-2018-browser-extension-comparison-malwares-and-phishings.80915/post-775975']Q&A - [Updated 12/11/2018] Browser extension comparison: Malwares and Phishings[/URL] Some steps are automatically included when using Hard_Configurator, so I would like to show the easy way of making such a setup with H_C: [LIST=1] [*]Install H_C (ConfigureDefender is already in H_C). Press [COLOR=rgb(0, 168, 133)][B]<ConfigureDefender>[/B][/COLOR] button and apply [B]<Defender High>[/B] settings. Close ConfigureDefender. [*]Use [COLOR=rgb(0, 168, 133)][B]<Load Profile>[/B][/COLOR] option in Hard_Configurator and apply [B]"Windows_10_Recommended_Enhanced" profile[/B]. This profile already includes MSI tweak, blocks scripts and Remote Access, so no need to use Exploit Guard for wmic.exe, cscript.exe, rdpshell.exe and powershell.exe. [*]Use [COLOR=rgb(0, 168, 133)][B]<Block Sponsors>[/B][/COLOR] button to block[B] mshta.exe[/B] and [B]iexplore.exe[/B]. You can add more sponsors if required. If particular applications require HTA files, then do not block mshta.exe, but make the Firewall rule to block the Internet access for it. [*]Configure your browser via 5 b) and c) steps included in [USER=50782]@Windows_Security[/USER] post. You can skip the 5 c) step if you like to use only Edge browser. [/LIST] [/QUOTE]

Verification