Advanced Plus Security Outpost Security Config 2020

[Outpost]

This is my security configuration for 2020

 

[harlan4096]

With the tweaks applied to KIS and also with TAM on, I find overkill to have also AppGuard + HitMan.Pro.Alert on resident protection

 

[Outpost]

With the tweaks applied to KIS and also with TAM on, I find overkill to have also AppGuard + HitMan.Pro.Alert on resident protection

Hi Harlan, you are most probably right on AppGuard, but I think HPA adds protection with its anti-exploit capabilities.

 

[harlan4096]

Yeah, but with the tweaks applied to KIS + TAM + own K. Anti-Exploit tech, probably are mitigated enough, but adding a new layer of additional resident protection from a different security application You are increasing the probability of incompatibility problems

Alternatively You may use a non resident protection tool such as NVT SysHardener to apply mitigations, and avoid the use of resident protection from HitMan.Pro.Alert

 

[Outpost]

Yeah, but with the tweaks applied to KIS + TAM + own K. Anti-Exploit tech, probably are mitigated enough, but adding a new layer of additional resident protection from a different security application You are increasing the probability of incompatibility problems

Alternatively You may use a non resident protection tool such as NVT SysHardener to apply mitigations, and avoid the use of resident protection from HitMan.Pro.Alert

Hi, Harlan, I took your advice. I removed Hitmanpro.Alert (installed on another PC)

 

[oldschool]

Please consider switching to Standard User Account.

 

[Outpost]

Please consider switching to Standard User Account.

Hello oldschool,
of course. I've always used the standard user. I just did a fresh installation, as soon as I finish configuring and installing the latest software, I will create the standard user.

 

[Outpost]

Added sync to OneDrive 1TB (Data Backup)

 

[Outpost]

Remove uBlock Origin - added Adguard For Desktop

 

[DDE_Server]

Good configuration
Thanks for sharing

 

[Outpost]

Switched to Standard User Account

 

[Outpost]

Remove AppGuard - License expired

 

[Outpost]

1) Removed pre-installed apps by Microsoft or third-party
2) Used Windows Privacy Dashboard and O&O ShutUP10 to manage computer’s privacy settings
3) Disabled unnecessary Windows services.

 

[Outpost]

Added Edge Chromium

 

[Outpost]

Remove VM
- malware samples will be tested on VM in another PC

 

[Outpost]

21/02/2020 - Added: VeraCrypt & KeePass (Portable)

 

[Andy Ful]

Hi,
Do you use MS Office?

 

[Outpost]

Hi,
Do you use MS Office?

Yes, why?

 

[Andy Ful]

Yes, why?

Your KIS setup is very strong, especially for unsafe applications/DLLs/scripts (TAM). I am not sure if it is equally strong for LOLBins and fileless attacks, but it can probably mitigate most of them in some way. Many such attacks can be done via the weaponized MS Office documents. Normally, SysHardener could be tweaked to harden MS Office applications. But on SUA, the SysHardener's hardening for MS Office does not work.
I do not think that your setup requires any modification. Please, treat my notes as some theoretical considerations.

 

[harlan4096]

TAM has been removed in the upcoming K2021, so tweaking Application Control will be a must