Advanced Plus Security NotoriousCypher PC Security 2023

[NotoriousCypher]

Hey there, MalwareTips community!

I'm NotoriousCypher, and I'm new to this forum. I'm thrilled to be part of a community focused on privacy and cybersecurity and eager to learn from all of you.

I was recommended to make a post about my current security configuration and the tools I use to receive feedback on how I can improve it. I'm relatively new to this privacy stuff, so I've been reading a lot, looking to enhance my privacy and security practices. I'm eager to hear from the experts in this community. What tools or configurations do you recommend? Are there any potential weaknesses in my current setup? I'm open to any and all feedback, and I look forward to learning from all of you.

Thank you for having me, and I can't wait to be a part of the discussions here at MalwareTips.

 

[harlan4096]

I see you added in “Notable changes”, that also uses additional backup to external HD, which tool are You using?

 

[Gandalf_The_Grey]

Thanks for posting your config

You could tweak Microsoft Defender Antivirus with ConfigureDefender:

GitHub - AndyFul/ConfigureDefender: Utility for configuring Windows 10 built-in Defender antivirus settings.

Utility for configuring Windows 10 built-in Defender antivirus settings. - AndyFul/ConfigureDefender

github.com

ConfigureDefender utility for Windows 10

ConfigureDefender utility for Windows 10/11. New version 4.0.0.0 is available on the developer website (updated in January 2024): https://github.com/AndyFul/ConfigureDefender Softpedia: https://www.softpedia.com/get/PORTABLE-SOFTWARE/System/System-Enhancements/ConfigureDefender.shtml...

malwaretips.com

You could harden Windows with Simple Windows Hardening:

Hard_Configurator/Simple Windows Hardening at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

New Update - Simple Windows Hardening

Post updated in July 2023. SWH ver. 2.1.1.1 - July 2023 (added support for Windows 11 ver. 22H2) https://github.com/AndyFul/Hard_Configurator/raw/master/Simple%20Windows%20Hardening/SimpleWindowsHardening_2111.zip SWH ver. 2.0.0.1 - August 2022 (no support for Windows 11 ver. 22H2)...

malwaretips.com

To get Simple Windows Hardening (the SRP part) working on a freshly installed Windows 11 22H2 you need to edit the registry, see this post:

Deprecated - Windows 11 22H2 no longer supports Software Restriction Policies (SRP)

A brief note to Windows administrators who still rely on Software Restriction Policies (SRP). This security feature has been deprecated since 2020, but is still supported in Windows 10. But Windows 11 version 22H2 will definitely put an end to the use of Software Restriction Policies –...

malwaretips.com

Results:

Hard_Configurator - Windows Hardening Configurator

Yes please give the user always the choice to use SRP (maybe off be default). On my win 11 MS decided to disable SAC. SAC was for me the reason to try 11 at all (so I'm quite disappointed). So if there is no SRP and MS disables SAC for you you got "nothing" otherwise. It is improbable that...

malwaretips.com

You could tweak Windows privacy with O&O ShutUp10++:

O&O ShutUp10++ – Free antispy tool for Windows 10 and 11

With the freeware O&O ShutUp10++, unwanted Windows 10 and 11 features can be disabled and the transfer of sensitive personal data onto Microsoft prevented.

www.oo-software.com

Serious Discussion - O&O ShutUp10++

1.9.1424 – released October 4, 2021 NEW: Support for Windows 11 NEW: Change of application name to “O&O ShutUp10++” NEW: Complete overworked user interface NEW: Integration of dark mode (switches automatically depending on Windows settings) NEW: Disable Cortana above lock screen NEW: Disable...

malwaretips.com

 

[NotoriousCypher]

I see you added in “Notable changes”, that also uses additional backup to external HD, which tool are You using?

I'm using cobianbackup for this. But to be honest, it could use a change. That's why I'm relying on more and more on my cloud backup these days.

Thanks for posting your config

You could tweak Microsoft Defender Antivirus with ConfigureDefender:

GitHub - AndyFul/ConfigureDefender: Utility for configuring Windows 10 built-in Defender antivirus settings.

Utility for configuring Windows 10 built-in Defender antivirus settings. - AndyFul/ConfigureDefender

github.com

ConfigureDefender utility for Windows 10

ConfigureDefender utility for Windows 10/11. New version 4.0.0.0 is available on the developer website (updated in January 2024): https://github.com/AndyFul/ConfigureDefender Softpedia: https://www.softpedia.com/get/PORTABLE-SOFTWARE/System/System-Enhancements/ConfigureDefender.shtml...

malwaretips.com

You could harden Windows with Simple Windows Hardening:

Hard_Configurator/Simple Windows Hardening at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

New Update - Simple Windows Hardening

Post updated in July 2023. SWH ver. 2.1.1.1 - July 2023 (added support for Windows 11 ver. 22H2) https://github.com/AndyFul/Hard_Configurator/raw/master/Simple%20Windows%20Hardening/SimpleWindowsHardening_2111.zip SWH ver. 2.0.0.1 - August 2022 (no support for Windows 11 ver. 22H2)...

malwaretips.com

To get Simple Windows Hardening (the SRP part) working on a freshly installed Windows 11 22H2 you need to edit the registry, see this post:

Deprecated - Windows 11 22H2 no longer supports Software Restriction Policies (SRP)

A brief note to Windows administrators who still rely on Software Restriction Policies (SRP). This security feature has been deprecated since 2020, but is still supported in Windows 10. But Windows 11 version 22H2 will definitely put an end to the use of Software Restriction Policies –...

malwaretips.com

Results:

Hard_Configurator - Windows Hardening Configurator

Yes please give the user always the choice to use SRP (maybe off be default). On my win 11 MS decided to disable SAC. SAC was for me the reason to try 11 at all (so I'm quite disappointed). So if there is no SRP and MS disables SAC for you you got "nothing" otherwise. It is improbable that...

malwaretips.com

You could tweak Windows privacy with O&O ShutUp10++:

O&O ShutUp10++ – Free antispy tool for Windows 10 and 11

With the freeware O&O ShutUp10++, unwanted Windows 10 and 11 features can be disabled and the transfer of sensitive personal data onto Microsoft prevented.

www.oo-software.com

Serious Discussion - O&O ShutUp10++

1.9.1424 – released October 4, 2021 NEW: Support for Windows 11 NEW: Change of application name to “O&O ShutUp10++” NEW: Complete overworked user interface NEW: Integration of dark mode (switches automatically depending on Windows settings) NEW: Disable Cortana above lock screen NEW: Disable...

malwaretips.com

Amazing recommendations here! Thanks for taking the time to gather these for me. I love that you recommended me something to harden windows defender, as I really don't trust third-party antivirus software that much...

 

[Gandalf_The_Grey]

The software for Microsoft Defender and Windows from @Andy Ful are great with a lot of built-in help and manuals in pdf.
You can ask questions in the linked threads.

Hard_Configurator Tools

malwaretips.com

 

[harlan4096]

As a full image system backup tool I would use Macrium Reflect, fast and highly reliable.

 

[NotoriousCypher]

As a full image system backup tool I would use Macrium Reflect, fast and highly reliable.

Could it be configured to back it up directly to a cloud?

 

[harlan4096]

Hum I'm not sure, probably not... this would be a reliable and faster alternative to cloud, in external HD.

 

[NotoriousCypher]

Hum I'm not sure, probably not... this would be a reliable and faster alternative to cloud, in external HD.

I understand. I'll test it then! Thanks for the recommendation! Maybe I can pair it with rClone to encrypt the backup and send the backup to the cloud too, so I have redundancy.

 

[Lightning_Brian]

I highly recommend Macrium Reflect as well @NotoriousCypher . Have this be stored on local external media that only gets connected to the computer for backup reasons. Encrypt that backup with heavy duty encryption (AES-256 or better) and then upload that encrypted disk backup to a cloud storage provider if your network, data, and security needs are sufficient. Redundancy is a must in this day in age. You'll see that I use a few redundancies in my own setup.

~Brian