Advanced Plus Security  (From forum thread)NotoriousCypher's PC Security Config

Current configurationWindows 11
Version 1Updated
9 replies
Community rating Not rated yet View setup

Copied from NotoriousCypher's forum thread – not yet confirmed as current by the owner

Detailed suggestions and alternatives welcome
Staff assessment Advanced Plus Security· From forum thread

Taken from the forum thread's label. The reviewer and date were not recorded, and staff have not re-checked it against the current setup.

What do the levels mean? Assessment history

Device & operating system

, 3 answers
Operating system
Windows 11
Main use of this computer
For work or educational use
Usage and exposure
Visiting familiar websites, Working from home, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Streaming audio/video content from trusted sites or paid subscriptions

Protection & updates

, 12 answers
Real-time protection
Windows Defender
Device firewall
Microsoft Defender Firewall
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID), Account password
Security updates
Allow security updates and latest features
User Account Control (UAC)
Always notify
Smart App Control
On
Network firewall
Enabled
Router and network details
Ubiquiti UniFi - Whitelist mode on (will only give access to specific MAC addresses)
Custom security settings
Whitelist on the router. Thinking of using DNS-level adblocking too.
Periodic malware scanners
Weekly
Malware sample testing
I do not participate in malware testing

Browsing, accounts & privacy

, 3 answers
Browsers and extensions
Brave Browser. Extensions: Bitwarden, Grammarly, TabExtend
Desktop VPN
I use a paid VPN. BulletVPN
Password and passkey manager
Bitwarden

Backup & recovery

, 2 answers
File and photo backups
My personal backup is stored in a paid cloud service that is Open-Source and with Zero-Knowledge encryption and servers located in Europe. Internxt
System recovery
Yes, I create recovery states every month and store them on Internxt (My paid private cloud)

Apps, specs & notes

, 4 answers
Maintenance tools
None
Computer specs
Ryzen 7 CPU 5000 series
Nvidia GeForce GTX 1080
12 GB Ram DDR4
SSD 1TB
Notable changes
I recently changed my backups from an external HDD to a cloud-based solution. (I keep both, but my primary backup is now the one encrypted in the cloud). I researched a lot about this and ended up selecting one with servers in Europe (for GDPR) that are open-source and with zero knowledge encryption. I have also been changing my passwords to be absolutely randomized; I got a lot of online accounts, so it's still in progress.
I was thinking of getting a DNS-level AD blocker, too (with a raspberry Pi and pihole), but I'm not sure how safe this is.
Feedback preference
Detailed suggestions and alternatives welcome
Community rating

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

Not rated yet
An open invitation for useful feedback.

Sign in to rate this setup

Go to discussion

Copied from the member's forum thread. This is a configuration record, not a device scan.

One of 211 member setups in the Security Setup Hub. Browse setupsGet yours checked

Original discussion fields (as posted in the thread)
Thread details
Last updated
Mar 20, 2023
Main use of this computer
For work or educational use
Operating system
Windows 11
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
    • Account password
Security updates
Allow security updates and latest features
User Account Control (UAC)
Always notify
Smart App Control
On
Network firewall
Enabled
Router and network details
Ubiquiti UniFi - Whitelist mode on (will only give access to specific MAC addresses)
Real-time protection
Windows Defender
Device firewall
Microsoft Defender Firewall
Custom security settings
Whitelist on the router. Thinking of using DNS-level adblocking too.
Periodic malware scanners
Weekly
Malware sample testing
I do not participate in malware testing
Browsers and extensions
Brave Browser. Extensions: Bitwarden, Grammarly, TabExtend
Desktop VPN
I use a paid VPN. BulletVPN
Password and passkey manager
Bitwarden
Maintenance tools
None
File and photo backups
My personal backup is stored in a paid cloud service that is Open-Source and with Zero-Knowledge encryption and servers located in Europe. Internxt
System recovery
Yes, I create recovery states every month and store them on Internxt (My paid private cloud)
Usage and exposure
    • Visiting familiar websites
    • Working from home
    • Making audio/video calls
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
Computer specs
Ryzen 7 CPU 5000 series
Nvidia GeForce GTX 1080
12 GB Ram DDR4
SSD 1TB
Notable changes
I recently changed my backups from an external HDD to a cloud-based solution. (I keep both, but my primary backup is now the one encrypted in the cloud). I researched a lot about this and ended up selecting one with servers in Europe (for GDPR) that are open-source and with zero knowledge encryption. I have also been changing my passwords to be absolutely randomized; I got a lot of online accounts, so it's still in progress.
I was thinking of getting a DNS-level AD blocker, too (with a raspberry Pi and pihole), but I'm not sure how safe this is.
Feedback preference

Detailed suggestions and alternatives welcome

NotoriousCypher

NotoriousCypher

New Member
Setup PC setup
Published snapshot Version 1 View current setup
Hey there, MalwareTips community!

I'm NotoriousCypher, and I'm new to this forum. I'm thrilled to be part of a community focused on privacy and cybersecurity and eager to learn from all of you.

I was recommended to make a post about my current security configuration and the tools I use to receive feedback on how I can improve it. I'm relatively new to this privacy stuff, so I've been reading a lot, looking to enhance my privacy and security practices. I'm eager to hear from the experts in this community. What tools or configurations do you recommend? Are there any potential weaknesses in my current setup? I'm open to any and all feedback, and I look forward to learning from all of you.

Thank you for having me, and I can't wait to be a part of the discussions here at MalwareTips.
 
Thanks for posting your config (y)

You could tweak Microsoft Defender Antivirus with ConfigureDefender:
github.com

GitHub - AndyFul/ConfigureDefender: Utility for configuring Windows 10 built-in Defender antivirus settings.

Utility for configuring Windows 10 built-in Defender antivirus settings. - AndyFul/ConfigureDefender
github.com github.com
malwaretips.com

ConfigureDefender utility for Windows 10/11 | MalwareTips

Post updated in December 2025 ConfigureDefender utility for Windows 10/11. New stable version 4.1.0.0 is available on the developer website (updated in...
malwaretips.com malwaretips.com

You could harden Windows with Simple Windows Hardening:
github.com

Hard_Configurator/Simple Windows Hardening at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator
github.com github.com
malwaretips.com

Simple Windows Hardening | MalwareTips

Post updated in March 2026. Simple Windows Hardening is replaced by Windows Hybrid Hardening. Windows Hybrid Hardening Light works in the default settings...
malwaretips.com malwaretips.com
To get Simple Windows Hardening (the SRP part) working on a freshly installed Windows 11 22H2 you need to edit the registry, see this post:
malwaretips.com

Windows 11 22H2 no longer supports Software Restriction Policies (SRP) | MalwareTips

https://borncity.com/win/2022/11/08/windows-11-22h2-no-longer-supports-software-restriction-policies-srp/
malwaretips.com malwaretips.com

Results:
malwaretips.com

Hard_Configurator - Windows Hardening Configurator | Page 198 | MalwareTips

It is improbable that Microsoft will remove both SAC and SRP. But in such a case, one can use AppLocker (via LightWindowsHardening) instead of SRP...
malwaretips.com malwaretips.com

You could tweak Windows privacy with O&O ShutUp10++:
www.oo-software.com

O&O ShutUp10: The antispy tool for Windows 10 and 11!

O&O ShutUp10++ helps you to quickly adjust data protection settings in Windows 10/11 – recommended, clear, free of charge.
www.oo-software.com www.oo-software.com
malwaretips.com

O&O ShutUp10++ | MalwareTips

https://www.oo-software.com/en/shutup10/changelog
malwaretips.com malwaretips.com
 
Last edited:
From the setup owner View current setup
harlan4096 said:
I see you added in “Notable changes”, that also uses additional backup to external HD, which tool are You using?
Click to expand...
I'm using cobianbackup for this. But to be honest, it could use a change. That's why I'm relying on more and more on my cloud backup these days.

Gandalf_The_Grey said:
Thanks for posting your config (y)

You could tweak Microsoft Defender Antivirus with ConfigureDefender:
github.com

GitHub - AndyFul/ConfigureDefender: Utility for configuring Windows 10 built-in Defender antivirus settings.

Utility for configuring Windows 10 built-in Defender antivirus settings. - AndyFul/ConfigureDefender
github.com github.com
malwaretips.com

ConfigureDefender utility for Windows 10/11 | MalwareTips

Post updated in December 2025 ConfigureDefender utility for Windows 10/11. New stable version 4.1.0.0 is available on the developer website (updated in...
malwaretips.com malwaretips.com

You could harden Windows with Simple Windows Hardening:
github.com

Hard_Configurator/Simple Windows Hardening at master · AndyFul/Hard_Configurator

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator
github.com github.com
malwaretips.com

Simple Windows Hardening | MalwareTips

Post updated in March 2026. Simple Windows Hardening is replaced by Windows Hybrid Hardening. Windows Hybrid Hardening Light works in the default settings...
malwaretips.com malwaretips.com
To get Simple Windows Hardening (the SRP part) working on a freshly installed Windows 11 22H2 you need to edit the registry, see this post:
malwaretips.com

Windows 11 22H2 no longer supports Software Restriction Policies (SRP) | MalwareTips

https://borncity.com/win/2022/11/08/windows-11-22h2-no-longer-supports-software-restriction-policies-srp/
malwaretips.com malwaretips.com

Results:
malwaretips.com

Hard_Configurator - Windows Hardening Configurator | Page 198 | MalwareTips

It is improbable that Microsoft will remove both SAC and SRP. But in such a case, one can use AppLocker (via LightWindowsHardening) instead of SRP...
malwaretips.com malwaretips.com

You could tweak Windows privacy with O&O ShutUp10++:
www.oo-software.com

O&O ShutUp10: The antispy tool for Windows 10 and 11!

O&O ShutUp10++ helps you to quickly adjust data protection settings in Windows 10/11 – recommended, clear, free of charge.
www.oo-software.com www.oo-software.com
malwaretips.com

O&O ShutUp10++ | MalwareTips

https://www.oo-software.com/en/shutup10/changelog
malwaretips.com malwaretips.com
Click to expand...
Amazing recommendations here! Thanks for taking the time to gather these for me. I love that you recommended me something to harden windows defender, as I really don't trust third-party antivirus software that much...
 
The software for Microsoft Defender and Windows from @Andy Ful are great with a lot of built-in help and manuals in pdf.
You can ask questions in the linked threads.
malwaretips.com

Hard_Configurator Tools | MalwareTips

Explore Hard_Configurator tools, share configurations, and discuss your results.
malwaretips.com malwaretips.com
 
I highly recommend Macrium Reflect as well @NotoriousCypher . Have this be stored on local external media that only gets connected to the computer for backup reasons. Encrypt that backup with heavy duty encryption (AES-256 or better) and then upload that encrypted disk backup to a cloud storage provider if your network, data, and security needs are sufficient. Redundancy is a must in this day in age. You'll see that I use a few redundancies in my own setup.

~Brian
 

Join the discussion

Write your reply below. You'll create a free account or log in before it's posted.

Create account Log in

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top