+1
Autocontainment is good, if you use CruelSister settings.
If you want to tweak the script protection a little, so go into the advanced protection tab and enable embedded code detection for more processes. If a certain process, such as cmd.exe, gives you trouble, put that one back to the default setting.
HIPS is for advanced geeks who want to customize their protection.
Search YouTube cruelsister1 comodo firewall. There are two: the latest one Comodo Firewall Addendum or something...will give you all you need to know. Very easy!
I was too tired last night. Today's a new day , so here it is :