Advanced Plus Security nefty1029 Work Laptop Security Config 2020

Last updated
Aug 17, 2020
How it's used?
For work or educational use
Operating system
Windows 11
Log-in security
Security updates
Allow security updates
User Access Control
Always notify
Real-time security
  1. Microsoft Defender
  2. Comodo Firewall
Firewall security
Microsoft Defender Firewall
About custom security
Microsoft Defender:
  1. Configure Defender at High Settings
  2. Hard_Configurator using Windows_10_MT_Windows_Security_hardening profile.
  3. Firewall Hardening using recommended values
  4. Run by Smartscreen installed
Comodo Firewall
  1. Using Cruel Sister settings
  2. Chrome and Firefox Sandboxed (Sandboxing Edge causes errors)
Periodic malware scanners
Malwarebytes Free (On Demand)
Hitman Pro Free (On Demand)
Kaspersky Virus Removal tool (Monthly)
Malware sample testing
I do not participate in malware testing
Browser(s) and extensions
Secure: Edge Browser using a modified banking profile based on this thread with enabled Flags and anti-exploit settings.
  1. Adguard Extension with additional rules from here and here.

Main : Chrome
  1. Birdefender TrafficLight
  2. Netcraft Extension
  3. Adguard extension
  4. Microsoft Defender Browser Protection
Backup: Firefox
  1. Birdefender TrafficLight
  2. Netcraft Extension
  3. Adguard extension
Edge is used to access banking and government related sites. Chrome is used for regular browsing and Firefox is used for backup. Both Firefox nd Chrome are sandboxed by Comodo based on Cruel Sister's guide.
Maintenance tools
  • Windows Disk Cleaner
  • PatchmyPC
  • Revo Uninstaller Free
File and Photo backup
Onedrive
System recovery
Aomei Backupper
Risk factors
    • Logging into my bank account
    • Browsing to popular websites
    • Working from home
Computer specs
13" Macbook Pro (early 2015 model)
  • CPU: Intel Core i5-5257U.
  • GPU: Intel Iris Graphics 6100.
  • Storage: 256GB SSD.
  • RAM: 8GB
Notable changes
17 August
  • Changed Hitman Pro scans from Daily to Ondemand.
  • Changed Malwarebytes scans from Weekly to Ondemand.

nefty1029

Level 1
Thread author
Verified
Mar 13, 2018
24
Here is the configuration for my work laptop. Compared to my main laptop, my work laptop is much more locked down and with minimal software installations. The only other major software installed that is Office 365.
This is mainly used to type documents and edit spreadsheets, as well as access banking and government related websites.
I have also made a standard user account just in case my family wants to use the PC.
 
F

ForgottenSeer 85179

"Hitman Pro Free (Daily)"
With your setup this isn't needed. Same for weekly scans.

"Secure: Edge Browser using a modified banking profile based on this thread with enabled Flags and anti-exploit settings."
(y) :emoji_beer:
With the profile based Edge setup you don't need other browsers ;)

"KeePass XC"
Under Windows I recommend the original KeePass which is audited and provide secure desktop mode and plugins like for Windows Hello
 
  • Like
Reactions: Protomartyr

nefty1029

Level 1
Thread author
Verified
Mar 13, 2018
24
"Hitman Pro Free (Daily)"
With your setup this isn't needed. Same for weekly scans.
Changed Hitman Pro scanning from daily to ondemand. Same with Malwarebytes.
"Secure: Edge Browser using a modified banking profile based on this thread with enabled Flags and anti-exploit settings."
(y) :emoji_beer:
With the profile based Edge setup you don't need other browsers ;)
True but I like separate my work from casual browsing and having a different browser is much easier for me than using multiple Edge profiles.

"KeePass XC"
Under Windows I recommend the original KeePass which is audited and provide secure desktop mode and plugins like for Windows Hello
I actually used Keepass for some time before importing my database to KeepassXC. I still prefer the UI of KeepassXC.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top