Make your video test requests!

[Andy Ful]

MS Defender disabled ?

WHHLight on default settings works optimally with Microsoft Defender (ConfigureDefender HIGH), FirewallHardening, and DocumentsAntiExploit. All tools support each other to maximally cover the attack surface at home.

If you disable Defender using custom tweaks/tools, the WDAC may stop working.
If you disable only Defender's real-time protection, most of the advanced ConfigureDefender settings will not work.

 

[Andy Ful]

It is possible to test WHHLight default settings with Microsoft Defender on default settings with disabled real-time protection + FirewallHardening + DocumentsAntiExploit (MS Office and Acrobat Reader open documents by default).
Other Defender's settings (like Cloud Delivered Protection) must be enabled.
WHHLight in default settings requires additional protection against weaponized documents (such as DocumentsAntiExploit). Default settings highly restrict scripting attacks, but allow CmdLines with LOLBins (useful for system management). So, FirewallHardening is also required to restrict LOLBins.

 

[simmerskool]

MS Defender disabled ?

me too interested in this test of WHHL (but I think (prefer) Defender enabled, ie, test it how it is (will be) primarily used imho).

 

[rashmi]

MS Defender disabled ?

Yes, disable Microsoft Defender. I don't want MD's protection, local or cloud, affecting the test.

I know an antivirus should complement the setup for well-rounded protection. The purpose of the test is not protection, for which I viewed your several @Andy Ful's Tools tests, but to see the strength of hardening + reputation.

I just want to see hardening + WDAC setup into effect.

Test:
WHHLight: Set SWH and WDAC to ON.
FirewallHardening: Add LOLBins.

And if the test system has MS Office or Adobe, add:
FirewallHardening: Add MS Office and Adobe Acrobat.
DocumentsAntiExploit: Set MS Office to ON1 for Current Users and to ON for All Users. Set Adobe Acrobat to ON for Current Users and to TL for All Users.

If anything, please let me know.