Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 971298" data-attributes="member: 32260">In fact, they overlap much (on important features), but SWH is more restrictive. Some features configured by SysHardener are already hardened in default settings on Windows 7+.If you use Defender + Comodo Firewall, then you can try [USER=7463]@cruelsister[/USER] settings and skip SWH and Syshardener.Otherwise, configure Defender with HIGH settings, and:<ol>
<li data-xf-list-type="ol">For basic hardening without whitelisting, use SysHardener on default settings and skip SWH. SysHardened has not got any logs so it is usually hard to recognize what was blocked (to solve the block issues). That is why most users should not use it on MAX settings. Advanced users can use Windows Event logs for that. 
SysHardener uses blocks without the possibility of whitelisting, so if something useful is blocked one has to disable the feature that blocks it (security is weakened).</li>
<li data-xf-list-type="ol">For more restrictive hardening with whitelisting, use SWH and skip SysHardener. SWH is more restrictive than SysHardener, but whitelisting can allow your trusted files and still block unknown files. 
If you did not disable Windows Firewall you can use the FirewallHardening tool which is more comprehensive compared to the current SysHardener firewall rules. You can also use custom Comodo Firewall rules instead FirewallHardening tool&nbsp; (this will require adding many rules for LOLBins).</li>
</ol><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" /></blockquote>

[QUOTE="Andy Ful, post: 971298, member: 32260"] In fact, they overlap much (on important features), but SWH is more restrictive. Some features configured by SysHardener are already hardened in default settings on Windows 7+. If you use Defender + Comodo Firewall, then you can try [USER=7463]@cruelsister[/USER] settings and skip SWH and Syshardener. Otherwise, configure Defender with HIGH settings, and: [LIST=1] [*]For basic hardening without whitelisting, use SysHardener on default settings and skip SWH. SysHardened has not got any logs so it is usually hard to recognize what was blocked (to solve the block issues). That is why most users should not use it on MAX settings. Advanced users can use Windows Event logs for that. SysHardener uses blocks without the possibility of whitelisting, so if something useful is blocked one has to disable the feature that blocks it (security is weakened). [*]For more restrictive hardening with whitelisting, use SWH and skip SysHardener. SWH is more restrictive than SysHardener, but whitelisting can allow your trusted files and still block unknown files. If you did not disable Windows Firewall you can use the FirewallHardening tool which is more comprehensive compared to the current SysHardener firewall rules. You can also use custom Comodo Firewall rules instead FirewallHardening tool (this will require adding many rules for LOLBins). [/LIST] (y) [/QUOTE]

Verification