By Staff harlan4096 Security Config 2025

Thread starter harlan4096
Start date May 27, 2024

PC Setup Configuration Help & Showcase

41 Replies 8,503 Views

Last updated: Jan 22, 2025

Main use of this computer: For home and private use

Operating system: Windows 11

On-device encryption: VeraCrypt

Device sign-in security

- Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
- Account password

Security updates: Allow security updates

Update channels: Allow stable updates only

User Account Control (UAC): Always notify

Smart App Control: Off

Network firewall: Enabled

Router and network details: ZYXEL EX3301 (ISP router)

Real-time protection

Kaspersky Endpoint Security 12.8
KeyScrambler Free
SandBoxie Classic

Device firewall: Other - Internet Security (3rd-party)

Custom security settings

Windows 11 Core Isolation Enabled
Host Intrusion Prevention: Trust group for applications that could not be added to existing groups -> UnTrusted
Host Intrusion Prevention: Trust group for applications started before Kaspersky Endpoint Security -> UnTrusted
Host Intrusion Prevention: Trust digitally signed applications -> Disabled
Host Intrusion Prevention: Manage Resources: my C:\User\<account> protected with special strong rights
Treat port scanning and network flooding as attacks -> Enabled
MAC Spoofing Protection -> Enabled

Periodic malware scanners

AdwCleaner
NPE
EEK
HitManPro
McAfee Stinger
ESET Online Scanner

Malware sample testing: I participate in malware testing; details below

Environment for malware testing: VMWare Pro with 2 virtual machines: Kaspersky Premium, Kaspersky Endpoint Security

Browsers and extensions

I have 6 browsers installed: Mozilla FireFox, LibreWolf, Opera, Brave, Chrome and of course Edge (

)

But my main daily is Mozilla FireFox (using DuckDuckGo URL as main page for searching), with add-ons:

uBlock Origin
NetCraft
WebRTC Leak Protection
DarkReader
Simple Translate
Language Tool
DuckDuckGo Privacy Essentials

In the rest of browsers, I have, at least, uBlock Origin (Lite in Chromium based) add-on installed.

Secure DNS

CloudFlare
Quad9

Desktop VPN

Mega VPN Unlimited
WindScribe (10GB monthly)

Password and passkey manager: KeePassXC (offline)

Maintenance tools

WPD to stop unnecessary Windows services and Telemetry.
CrystalDiskInfo
CrystalDiskMark
HWMonitor
QuickCPU
FastCopy
Free Download Manager
AnyDesk (paid subscription, I need it for my working)

File and photo backups: MegaSync app + Mega Pro Lite (400GB)

Subscriptions

- None

System recovery

Macrium Reflect Home (paid)
Hasleo BackUp Suite (free for now)

Weekly cloning both images to external hard drive.

Usage and exposure

- Visiting familiar websites
- Working from home
- Opening email attachments
- Online shopping and card payments
- Logging into my bank account
- Downloading files from unknown or untrusted sources
- Requesting and accepting remote access
- Streaming audio/video content from trusted sites or paid subscriptions
- Streaming from untrusted sites

Computer specs: Showcase - harlan4096 MINISFORUM new main system

After using for long years my main system with an AMD Athlon II X3 450 + 12GB RAM DDR3 + Crucial MX300 SSD 512GB, I'm changing to this new system :) Anyway, the AMD Athlon II X3 still alive and kicking! And will keep it for testing purposes :) The new system it's a beast, very fast, not so...

malwaretips.com

Notable changes

22/01/2025: Updated versions of some already installed apps, added Mega VPN.

Feedback preference: Suggestions on the main improvements

harlan4096

Super Moderator

Verified

Staff Member

Malware Hunter

Well-known

Forum Veteran

Jun 3, 2024

As I posted before, with KES We don't have all those additional modules / features, no browsers add-ons, no script injection unless You want to use that additional Web Control logging, etc.