SECURITY: Complete Minimalist's security configuration 2021

Last updated
Apr 30, 2021
About
Personal, primary device
Additional PC users
Not shared with other users
Desktop OS
Windows 10
OS License Type
Pro
Login security
    • Password (Aa-Zz, 0-9, Symbols)
Primary sign-in
Local account
Primary account rights
Administrator permissions
Other accounts rights
N/A - Single user account
Security updates
Manual - check for updates, but do not install
Windows UAC
Maximum - always notify
Network firewall
Personal router w/ firewall & filtering
Real-time protection
Emsisoft Anti-Malware
Software firewall
Microsoft Defender Firewall
Custom RTP, Firewall and OS settings
Emsisoft: Behavior Blocker and File Guard set to Alert
Macrium: enabled and configured Macrium Image Guardian
Malware research
No - malware samples are not downloaded
Periodic scanners
HitmanPro, Norton Power Eraser
DNS
Quad9 (9.9.9.9)
CloudFlare (1.1.1.2)
VPN
Mullvad
Password manager
KeePass
Browsers, Search and Addons
Firefox & uBlock Origin
PC maintenance
ShutUp10
CCleaner
Personal Files & Photos backup
Daily - synchronization on internal disks using batch file and scheduler.
Daily - Macrium Incremental file backup for important data.
Weekly - manually copying data to external disks.
Personal backup routine
Automatic (scheduled)
Device recovery & backup
Macrium Reflect
Device backup routine
Automatic (scheduled)
PC activity
  1. Working from home. 
  2. Browsing the web. 
  3. Emails. 
  4. Shopping. 
  5. Banking. 
  6. Remote assistance. 
  7. Streaming. 
Computer specs
HP EliteDesk 800 G5 TWR
• Intel Core i7-9700 CPU @ 3.00GHz
• Intel UHD Graphics 630
• DDR4 32 GB @ 2667 MHz
• 2x 500 GB SSD + 4TB HDD
Personal changelog
24.12.2020 - original post.
29.12.2020 - added information for new data entries.
30.12.2020 - added information about password manager.
1.1.2021 - set Quad9 for DNS server.
15.1.2021 - added CloudFlare to DNS servers list.
19.1.2021 - changed updates to manual.
24.1.2021 - enabled Macrium Image Guard.
31.1.2021 - added info about network firewall.
15.2.2021 - installed Trend Micro as real-time antimalware solution.
27.2.2021 - Installed Kaspersky Internet Security and enabled Trend Micro protections included in router.
7.3.2021 - replaced Kaspersky Internet Security with Emsisoft Anti-Malware.
26.4.2021 - installed KIS in "minimal" mode.
30.4.2021 - replaced KIS with Emsisoft Anti-Malware
Feedback Response

General feedback

Lightning_Brian

Level 15
Verified
Content Creator
Sep 1, 2017
729
@Minimalist Keep me posted on Quad9. I'm interested in swapping up my DNS provider when I'm not using my VPN 24/7/365.

I see you are using Macrium Reflect. Have you used viBoot? Great tool that some folks don't know about. Link: Macrium viBoot

viBoot is a good tech tool to have when wanting to test things out. Thought I mention it!

Good setup!

~Brian
 

Minimalist

Level 5
Oct 2, 2020
217
Thnx @Lightning_Brian .

I like Qad9 so far. I didn't test it's blocking capabilities but doing some tests with DNSBench it scored quite well.

Yes, I use Macrium Reflect for a long time now and like it a lot. I did not use viBoot till now but I read about it. I use Kaspersky a lot and IDK if both apps could use hyper-v at the same time.
I usually test my images by attaching VHD, restoring an image to it and run it in Virualbox. I know it's an old way of doing it but I still prefer it over viBoot. I also don't install CBT and MIG on my system. I guess that I like just the basics and that they work with no problems.
 

Lightning_Brian

Level 15
Verified
Content Creator
Sep 1, 2017
729
Hi @Minimalist !

Good stuff! Glad you are liking Quad9 so far. Been looking at seriously using that when I'm not using my VPN 24/7/365. Glad to hear your experience is going well thus far.

Read more about viBOot - super nice and quite easy to use in my own humble opinion. I'm not sure about the Kaspersky route and if both apps can use Hyper-V at the same time. @harlan4096 would you be able to answer that question for Minimalist? I would suspect the answer is 'yes'; however, I wouldn't want to inform you incorrect info.

The old way is a good way there Minimalist. I know if I wasn't using the stuff I'm using now that would be the way I would test things too.

~Brian
 

Minimalist

Level 5
Oct 2, 2020
217
Thnx. I guess that Kaspersky only needs it for Safe money component? Since I don't use it, it wouldn't be a big problem.

EDIT: that was the reason why I asked:

1610228820269.png
 
Last edited:
Top