SECURITY: Complete Morro Security Config 2021

Last updated
Jan 13, 2021
About
Personal, primary device
Additional PC users
Not shared with other users
Desktop OS
Windows 10
OS License Type
Home
Login security
    • Passwordless (PIN, Biometric, Face)
Primary sign-in
Microsoft account
Primary account rights
Limited permissions
Other accounts rights
N/A - Single user account
Security updates
Automatic - allow all types of updates
Windows UAC
Maximum - always notify
Network firewall
ISP-issued router w/ firewall & filtering
Real-time protection
* Ziggo Safe Online by F-Secure
* Malwarebytes WFC.
* Neushield Data Sentinel
Software firewall
Microsoft Defender Firewall
Custom RTP, Firewall and OS settings
* Simple Windows Hardening. ( Basic recommended settings. )
* O&O ShutUp10 (recommended settings)
* VeraCrypt
Malware research
No - malware samples are not downloaded
Periodic scanners
Periodic manual scan by Ziggo Safe Online by F-Secure - On demand scanners: Eset Online Scanner - EEK
DNS
NextDNS by using YogaDNS.
VPN
None
Password manager
Bitwarden
Browsers, Search and Addons
* Microsoft Chromium Edge ( Main )
* Firefox
PC maintenance
* Storage Sense
* Wise Disk Cleaner
* PrivaZer ( Once a week. )
* Process Explorer
* O&O Defrag Pro
Personal Files & Photos backup
Onedrive
Personal backup routine
Automatic (scheduled)
Device recovery & backup
EaseUS Todo Backup Free
Device backup routine
Automatic (scheduled)
PC activity
  1. Browsing the web. 
  2. Emails. 
  3. Downloading software. 
  4. PC and cloud gaming. 
  5. Streaming. 
Computer specs
* CPU: Intel Core i5 @ 3.70GHz
* Motherboard: Z370-A PRO (MS-7B48) Micro-Star International Co, Ltd
* Ram: 16 GB DDR4
* Storage: SanDisk SD9SN8W256G (SSD) + 1TB HDD + External 5 TB WD Elements 25A3 USB Device
* Graphics: NVIDIA GeForce RTX 2070
* Soundcard: NVIDIA High Definition Audio / Realtek High Definition Audio / NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Feedback Response

General feedback

Morro

Level 11
Verified
Jul 8, 2012
508
Well Neushield Data Sentinel does more then just protect against ransomware. ( Even the free version. )


Yes I have seen the features, but I do not see anything special about it. You are using Kaspersky and it is great. I would just use One Drive and make regular backups.

I guess we all have our preferred methods. :)
 

Morro

Level 11
Verified
Jul 8, 2012
508
Okay, I saw Ziggo Safe Online by F-Secure being mentioned in Gandalf_The_Greys security thread, so I looked around on the net for more information about F-Secure Safe. ( Because that is what it is, just re-branded. ) And as of this afternoon I installed Ziggo Safe Online by F-Secure and I will use it for a while to see how I like it.

Their is no particular reason why I switched from KSC Free to Ziggo Safe Online by F-Secure. I am extremely happy with KSC Free, I just want to try out Ziggo Safe Online for a while. :)

But I have a question:

Since I do not see a scan option for downloaded files in the context menu, I assume it is safe to say that Ziggo Safe Online by F-Secure auto scans everything that is downloaded?
 

Gandalf_The_Grey

Level 46
Verified
Trusted
Content Creator
Apr 24, 2016
3,528
Okay, I saw Ziggo Safe Online by F-Secure being mentioned in Gandalf_The_Greys security thread, so I looked around on the net for more information about F-Secure Safe. ( Because that is what it is, just re-branded. ) And as of this afternoon I installed Ziggo Safe Online by F-Secure and I will use it for a while to see how I like it.

Their is no particular reason why I switched from KSC Free to Ziggo Safe Online by F-Secure. I am extremely happy with KSC Free, I just want to try out Ziggo Safe Online for a while. :)

But I have a question:

Since I do not see a scan option for downloaded files in the context menu, I assume it is safe to say that Ziggo Safe Online by F-Secure auto scans everything that is downloaded?
F-Secure automatically scans everything that is downloaded, but there is also a scan for viruses (Scannen op virussen in Dutch) option in the context menu.

In my case 16 downloads scanned:
Schermafbeelding 2021-05-02 171744.png Scan for viruses.png
 
Last edited:

Morro

Level 11
Verified
Jul 8, 2012
508
F-Secure automatically scans everything that is downloaded, but there is also a scan for viruses (Scannen op virussen in Dutch) option in the context menu.

In my case 16 downloads scanned:
View attachment 257668 View attachment 257669

Thank you very much, I did not see that at first, but now I did. It was directly below the Malwarebytes context scan so I must have thought it belonged to Malwarebytes. :oops:
 
  • Like
Reactions: Gandalf_The_Grey

mkoundo

Level 5
Verified
Jul 21, 2017
228
You can use Bitlocker in Home too, but only over command line which isn't a big deal as this is only needed once.

here are the bitlocker setup and commands you may find useful:

TPM
search tpm.msc and right click run as admin
verify tpm status is ready for use
==================================================

to check current status:
manage-bde -status

Add TPM key protector for each partition:
manage-bde -protectors -add c: -tpm
manage-bde -protectors -add d: -tpm

Add Recovery password in case i need to decrypt the partitions on another computer:
manage-bde -protectors -add c: -rp
manage-bde -protectors -add d: -rp

save recovery password:
manage-bde -protectors -get c:
manage-bde -protectors -get d:

Turn Bitlocker On with AES256 key and used space only encryption
manage-bde -on c: -em AES256 -used
manage-bde -on d: -em AES256 -used

To turn off:
manage-bde -off c:
manage-bde -off d:

In case of emergency, to unlock the drive using the recovery password:
manage-bde –unlock d: -recoverypassword 111111-222222-333333-444444-555555-666666-777777-888888


To pause protection, for example to update bios
manage-bde -protectors -disable c: -RebootCount 0
and then to re-enable:
manage-bde -protectors -enable c:

You can use values 0 through 15, while zero suspends BitLocker until you resume the protection manually.
 

Morro

Level 11
Verified
Jul 8, 2012
508
I installed YogaDNS, and set it to use NextDNS. The weird thing is that I tried to install YogaDNS a while ago, and got the warning that it could not connect without a internet connection. ( Or something along those lines. ) And now it works, so I guess that some how KSC Free blocked something that prevented YogaDNS form working properly. And switching to Ziggo Safe Online from F-Secure some how allowed me to start using YogaDNS and set it to use NextDNS.

I do have a question for those of you who use NextDNS through YogaDNS. Before, I could also not install the program from NextDNS so I had to set the DNS manually for IPv4 and IPv6. ( Come to think of it that could also have been because of KSC Free some how. ) But now that NextDNS is set in YogaDNS, can I set the DNS Server addresses for IPv4 and IPv6 to be applied automatically, ( Default Windows setting. ) or do I have to keep them at the manual set NextDNS server addresses?

I hope I explained it all correctly, because I have been known to explain certain things chaotically at times. :)
 
  • Like
Reactions: harlan4096

Morro

Level 11
Verified
Jul 8, 2012
508
I removed Brave, ( :( ) it had a odd problem I could not solve. It had moments where it worked perfectly, and then there where moments where it did not. When it did show odd behaviour, I could go to another website and then that new website would flicker like crazy. I would see parts of the previous website, and I would have to move my mouse like crazy all over the page to get rid of that odd behaviour. I tried uninstalling Brave a few times and then reinstalling it, but it never solved the problem. Scanning with KSC Free ( When I was using it. ) and with Malwarebytes and EEK never showed a problem so I have no idea why Brave had this problem for me. :unsure:

So Yesterday I finally decided to remove Brave as a secondary Browser, and replaced it with Firefox at the moment. So far I installed these extensions in Firefox ...

* Adguard
* Bitwarden
* LocalCDN
* Browsing Protection by F-Secure ( Ziggo Safe online kept warning me to install it. )

I am using NextDNS through YogaDNS so ads get blocked but not on Youtube, so that is why I installed Adguard in Firefox. In the past I used uBlock Origin, and although I think it is still a great extension, I picked Adguard this time. Reason for that is because some how uBlock Origin made it impossible for me to log in on this site.


Adguard does not give me that problem. :)
 
Top