Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Check for updates and Notify
Update channels
Allow stable updates only
User Account Control (UAC)
Notify me only when programs try to make changes to my computer
Smart App Control
Off
Network firewall
Enabled
Router and network details
MIKROTIK CHATEAU LTE18 AX + Sophos XG Firewall Home Editon with SSL Inspection
Real-time protection
Device firewall
Other - Next-generation Firewall (NGFW)
Custom security settings
- Firewall Hardening (Blocking outbound connections of LOLBins and Geo IP blocking Russian Federation, China, NorthKorea)
- O&O ShutUp++ (recomended settings)
- Core Isolation only enabled Microsoft Vulnerable Driver Blocklist
- Vulnerability scanner: Nessus Essentials System Settings:
- Autoplay disabled
- Hide extensions for know file type - disabled
- Show hidden files - enabled
- Virtualization enabled
- Windows Update Delivery Optimization disabled
- Browser extensions forced using ManageEngine Endpoint Central - Browser Control Plus module with blocked option to add your own from outside the admin console (Appropriate registry keys are read only)
- Just in Time Admin
Periodic malware scanners
Sophos Scan&Clean
Malwarebytes Free
Eset Online Scanner
Emsisoft Emergancy Kit
Malware sample testing
I participate in malware testing; details below
Environment for malware testing
VMWare Workstation Player
Windows 11 Enterprise Configuration
- Defender disabled with: Defender Remover
- Admin Privileges
Install Software
- Notepad++
- Java
- Firefox
- MS Office 2010 H&S
- eMClient
- Random file on desktop
- Adobe Reader
- SysInternalsSuite
- LibreOffice 6.0
- Python environment
Sanboxie Plus (Main OS)
VM on Nas Windows 7 Enterprise
Browsers and extensions
Mozilla Firefox
- Ublock Origin
- Proton Pass
- Helios Web Marshall
Secure DNS
ControlD
Desktop VPN
NordVPN
Password and passkey manager
Proton Pass Premium
Maintenance tools
ManageEngine Endpoint Central (Patch Managment + Much much more )
Revo Unsinstaller portable
Own cleaning script
File and photo backups
Synology DS420+
Subscriptions
Apple iCloud+ 200GB
Microsoft 365 Family (up to 1 TB per person)
System recovery
Synology Active Backup for Business
Usage and exposure
Visiting familiar websites
Visiting unknown or untrusted websites
Working from home
Making audio/video calls
Opening email attachments
Online shopping and card payments
Logging into my bank account
Downloading software and files from reputable sites
Downloading files from unknown or untrusted sources
Requesting and accepting remote access
Gaming
Streaming audio/video content from trusted sites or paid subscriptions
2026 Update:
1) SentinelOne has been replaced with CrowdStrike.
2) Helios Web Marshall has been added as a protection mechanism against malicious websites at the endpoint level.
3) 1Password has been replaced with Proton Pass Premium.
4) I have discontinued the use of separate Standard and Administrator accounts in favor of a single account protected by the Just-in-Time (JiT) Privilege mechanism (EPM).
5) Microsoft Edge has been replaced with Mozilla Firefox.
Recently browsing
Members who viewed this thread in the last 5 minutes
