Advanced Plus Security Michyon's Lockdown config 2018

[LDogg]

Dependant on the road you wish to go down, the AV covered route or the Whitelisting Anti-Exe route. Bitdefender covers the AV full on route, very solid product, covers a lot of vendors attacks, VDS covers scripts & other attack vendors. Comes down to your approach as you wish.

I'm assuming you want a lockdown approach, I would go with VoodooShield as the whitelisting anti-exe, you can also drag files over to the badge to scan direct with VirusTotal, you will not need OSArmor or Bitdefender with this approach. Adding Unchecky for PUPs ask @Spawn for more details on this, Syshardener with @Evjl's Rain settings, then all you need is Windows Defender/Firewall, twinned with Hard Configure ask @Andy Ful for more details, goes very well with Windows Firewall. This would reduce any attack vector down significantly. However no security implemented is 100% secure, just this approach would cut it down massively.

For your browser you can use uBlock Origin with filterlists to mitigate various threats & Malwarebytes Browser Extension, ticking off the Ads bit in settings. Going forward with this at first I believe with knowledge of the products to be more then decent for you. You could also utilise Sandboxie for more browser protection as well.

Having an overkilled setup is never good for anyone

~LDogg

 

[Ink]

Unchecky runs in the background, with silent updates and kicks in when needed. Install and forget. Nothing more, nothing less.

Memory (Private working set) is less than 1000K when sitting doing nothing.

 

[JM Safe]

Good config.

Thanks for sharing.