Advanced Plus Security kamiloxf's PC Security Config

PC Setup Configuration Help & Showcase
20 Replies 6,090 Views
Original forum configuration · expand details
Last updated
Jun 11, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
OS version and support details
24H2
On-device encryption
Not applicable
Device sign-in security
    • Hardware security key
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Check for updates and Notify
Update channels
Allow stable updates only
User Account Control (UAC)
Notify me only when programs try to make changes to my computer
Smart App Control
Off
Network firewall
Enabled
Router and network details
MIKROTIK CHATEAU LTE18 AX + Sophos XG Firewall Home Editon with SSL Inspection
Real-time protection
crowdstrike.png
Device firewall
Other - Next-generation Firewall (NGFW)
Custom security settings
- Firewall Hardening (Blocking outbound connections of LOLBins and Geo IP blocking Russian Federation, China, NorthKorea)
- O&O ShutUp++ (recomended settings)
- Core Isolation only enabled Microsoft Vulnerable Driver Blocklist
- Vulnerability scanner: Nessus Essentials
System Settings:
- Autoplay disabled
- Hide extensions for know file type - disabled
- Show hidden files - enabled
- Virtualization enabled
- Windows Update Delivery Optimization disabled
- Browser extensions forced using ManageEngine Endpoint Central - Browser Control Plus module with blocked option to add your own from outside the admin console (Appropriate registry keys are read only)
- Just in Time Admin
Periodic malware scanners
Sophos Scan&Clean
Malwarebytes Free
Eset Online Scanner
Emsisoft Emergancy Kit
Malware sample testing
I participate in malware testing; details below
Environment for malware testing
VMWare Workstation Player
Windows 11 Enterprise
Configuration
- Defender disabled with: Defender Remover
- Admin Privileges
Install Software
- Notepad++
- Java
- Firefox
- MS Office 2010 H&S
- eMClient
- Random file on desktop
- Adobe Reader
- SysInternalsSuite
- LibreOffice 6.0
- Python environment
Sanboxie Plus (Main OS)
VM on Nas Windows 7 Enterprise
Browsers and extensions
Mozilla Firefox
- Ublock Origin
- Proton Pass
- Helios Web Marshall
Secure DNS
ControlD
Desktop VPN
NordVPN
Password and passkey manager
Proton Pass Premium
Maintenance tools
ManageEngine Endpoint Central (Patch Managment + Much much more )
Revo Unsinstaller portable
Own cleaning script
File and photo backups
Synology DS420+
Subscriptions
    • Apple iCloud+ 200GB
    • Microsoft 365 Family (up to 1 TB per person)
System recovery
Synology Active Backup for Business
Usage and exposure
    • Visiting familiar websites
    • Visiting unknown or untrusted websites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Downloading files from unknown or untrusted sources
    • Requesting and accepting remote access
    • Gaming
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Downloading malware samples
Computer specs
None
Feedback preference

Suggestions on the main improvements

Changes:
- Changed antivirus to Xcitium AEP
- Return to Microsoft Edge browser
- Removed Malwarebytes Browser Guard extension
- Return from 1Password to Bitwarden
- Vulnerabilities detected by Nessus on home computers have been mitigated
- Remote management from DesktopCentral Cloud changed to built-in in Xcitium Endpoint Manager
 
November changes in protection:
- Changed Xcitium to SentinelOne
- Replaced Ublock Origin with Adguard (Reason Adguard does not display adblock notification on YT)
- Remote management returned to DesktopCentral Cloud
- Changed browser to Mozilla Firefox with the following extensions:
- Bitwarden
-Netcraft
-Adguard
 
Changes on 04/2024
- VPN solution added (Used from time to time mainly on laptop and phones when using public WiFi)
- ControlD as a secure DNS server, Adguard Home as an emergency one
- Changing the Password Manager to Devolutions Hub Personal (I switched as a test to learn about the possibilities that are less known among home users)
Changes to extensions:
- Bitwarden replaced by Devolutions Workspace
- Removed Netcraft (many false positives)
- Added Mcafee WebAdvisior


- Recently, the capabilities of the EndpointCentral solution I use have been expanded with new functions in the cloud console:
1) Browser Security Plus (Allows remote deployment of selected extensions and blocking the use of others, etc.)
2) Vulnerability Manager Plus (PatchManagmet extension)
3) DeviceControl allows you to implement advanced USB control at home
4) BitLocker Management

All this for free up to 25 computers at home

I will be using EndpointCentral more in the near future
 
Last edited:
kamiloxf said:
Changes on 04/2024
- VPN solution added (Used from time to time mainly on laptop and phones when using public WiFi)
- ControlD as a secure DNS server, Adguard Home as an emergency one
- Changing the Password Manager to Devolutions Hub Personal (I switched as a test to learn about the possibilities that are less known among home users)
Changes to extensions:
- Bitwarden replaced by Devolutions Workspace
- Removed Netcraft (many false positives)
- Added Mcafee WebAdvisior


- Recently, the capabilities of the EndpointCentral solution I use have been expanded with new functions in the cloud console:
1) Browser Security Plus (Allows remote deployment of selected extensions and blocking the use of others, etc.)
2) Vulnerability Manager Plus (PatchManagmet extension)
3) DeviceControl allows you to implement advanced USB control at home
4) BitLocker Management

All this for free up to 25 computers at home

I will be using EndpointCentral more in the near future
Click to expand...
Hey can you link me to that free EndpointCentral stuff? I'd love to try it if it's free
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top