Basic Security n0k0m3 Minimalistic Config

[n0k0m3]

Used Hard_Configurator with both Recommendations enabled except [Hide ''Run as Admin''], [Protect Shortcut].
Windows Defender enabled along with ESET + [Block at First Sight] config.
ESET config according to this thread: ESET Internet Security 10 : Recommended settings + PUP and PDP detection
Used ConfigureDefender at Defender High Settings
Used SimpleDNSCrypt to set DNS to CloudFlare 1.1.1.1 DNS over HTTPS protocol to speed up + DNSSEC

 

[Syafiq]

Windows Defender enabled along with ESET ?! How can you do that, as Windows Defender disabled itself when you're install another av

 

[FrFc1908]

Thanks for Sharing your config. Nothing to ad really

 

[n0k0m3]

Windows Defender enabled along with ESET ?! How can you do that, as Windows Defender disabled itself when you're install another av

Enable Periodic Scanning, force enable in Group Policy (although idk if it actually do anything but from time to time WD did pick up some malware that ESET real-time protection missed). Also I trust Microsoft MAPS

 

[Andy Ful]

Good fortification.
You noticed that many files can still be run using shortcuts ( .exe, .cmd, .msc, .reg, .hta).

 

[bribon77]

Thanks for Sharing

 

[JM Safe]

Good config.

You are protected.

Thanks for sharing.

 

[Exterminator]

Secure Windows 10 config!!
Thanks for sharing it with us

 

[JHomes]

Great config.

 

[n0k0m3]

Update:
- Switched from Lastpass to Bitwarden
- Removed Adguard DNS and replace with D0wn Resolver with DNSCrypt and DNSSEC to avoid MITM attack.
- Use ConfigureDefender and set to Defender High settings
- Updated Windows 10 to build 16299.192

 

[n0k0m3]

Update:
- Added a beautiful 10TB NAS to cold storage for monthly personal data backup and snapshots
- Added Google Drive for work requirement (*sadreacts*)
- Switched to CloudFlare DNS over HTTPS on SimpleDNSCrypt for speed