Setup Idea Hardened System with Kaspersky

PC Setup Ideas
20 Replies 10,114 Views
Thread details
Last updated
Apr 26, 2024
Main use of this computer
For home and private use
Operating system
macOS 15 Sequoia
On-device encryption
VeraCrypt
Device sign-in security
    • Hardware security key
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
    • Account password
Security updates
Allow security updates
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
Off
Network firewall
Enabled
Real-time protection
  • Kaspersky Standard / Plus / Premium
  • Kaspersky KIS / KTS / KSCloud
  • Macrium Reflect Home -> Image Guardian
Device firewall
Other - Internet Security (3rd-party)
Custom security settings
* Custom RTP Kaspersky settings:
Settings -> Performance Settings -> PC Resource Consumption -> Perform recommended Actions Automatically: Deselect
(For users who don't like warning prompts, They may keep this setting Selected by default)

Settings -> Security Settings -> Intrusion Prevention -> Trust Digitally Signed Application: Deselect

Settings -> Security Settings -> Intrusion Prevention -> Trust group for applications that could not be added to existing groups: UnTrusted

Settings -> Security Settings -> Intrusion Prevention -> Trust group for applications started before startup of Kaspersky: High Restricted

Additionally, You can implement Stronger Rules to protected Folders/Files against Ransomware Attacks

Note: settings not mentioned would remain by default.

* OS Settings: disable lots of services with WPD
Periodic malware scanners
  • WiseVector StopX (resident modules disabled)
  • Norton Power Eraser
  • AdwCleaner
Malware sample testing
I participate in malware testing; details below
Environment for malware testing
VMWare Workstation
Browsers and extensions
* Browser: Mozilla FireFox

* Search Engine: Google

* Add-ons: uBlock Origin, Dark Reader, IndicateTLS, Simple Translate, LT Language Tool
Secure DNS
CloudFlare / NextDNS / Quad9
Desktop VPN
Mullvad / WindScribe
Password and passkey manager
KeePassXC (manually -> Perform Auto-Type inside Mozilla FireFox)
Maintenance tools
PatchMyPC and/or RuskZuck to update system applications.
File and photo backups
* At least 1 Cloud services: Mega, OneDrive, Google Drive, etc.

* 2 External Devices to save redundant BackUps.
System recovery
Macrium Reflect Home / Halseo BackUp Suite
Usage and exposure
    • Visiting familiar websites
Computer specs
-
Recommended for
  1. Inexperienced users
  2. Experienced users
  3. Financial banking or trading
  4. High-end or medium spec PCs

harlan4096

Super Moderator
Verified
Staff Member
Malware Hunter
Well-known
Forum Veteran
This proposal of Setup Idea is relevant to these Kaspersky Products:
  • Kaspersky Standard / Plus / Premium
  • Kaspersky KIS / KTS / KSCloud

These Kaspersky Hardening tweaks try to emulate the old Trusted Application Mode, a feature that was removed by Kaspersky in their home products a few years ago, but in fact, it goes further and imposes stricter restrictions on the system.


* Some tips to working with PatchMyPC, RuckZuck, and new applications installations in general:

In many occasions, some unknown files by KSN spawn during installing new applications, and with current Intrusion Prevention settings, Kaspersky will irrevocably Block/Stop your installation. To avoid this inconvenience, see example below with PathMyPC, We can edit its Applications Rules and set these Exclusions:

1651573180947.png

For a new application installer (We take it for granted that we previously trusted it) that never was executed in the system, We may pre add it to Trusted Group this way:

1651573857222.png

Being in Intrusion Prevention -> Manage Applications: 1 left mouse click over Trusted Group, then 1 right mouse click, and select Add Application to Group, and finally select the new installer.

Once added, find the new installer via Search on top right of the window, select it with 1 right mouse click: Details and Rules -> Exclusions, set the Exclusions and Save.

Finally, run normally the installer :)
 
Last edited:

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top