Advanced Plus Security Outpost Security Config 2020

[Outpost]

Your KIS setup is very strong, especially for unsafe applications/DLLs/scripts (TAM). I am not sure if it is equally strong for LOLBins and fileless attacks, but it can probably mitigate most of them in some way. Many such attacks can be done via the weaponized MS Office documents. Normally, SysHardener could be tweaked to harden MS Office applications. But on SUA, the SysHardener's hardening for MS Office does not work.
I do not think that your setup requires any modification. Please, treat my notes as some theoretical considerations.

You touched on an important point: the mitigation of LOLBin attacks on KIS isn't actually very strong. I had already considered it and I have not yet had time to try if it is possible to do something on KIS (create specific rules).
SysHardener is tweaked, but I wasn't aware of its limitation with Office in the SUA.
Your considerations and advice are always welcome, so tell me if you have alternative proposals to recommend.

 

[ForgottenSeer 823865]

SysHardener is tweaked, but I wasn't aware of its limitation with Office in the SUA.

Reason you use Win10 Exploit Protection with those Office programs.

 

[Divine_Barakah]

TAM has been removed in the upcoming K2021, so tweaking Application Control will be a must

They dropped it? Why?

 

[Outpost]

They dropped it? Why?

Function unused by most ...

 

[Divine_Barakah]

Function unused by most ...

It was the only reason that made me use Kaspersky in the first place. It was the perfect set-and-forget setup especially if you're not experienced enough to play with settings. Too bad!

 

[ForgottenSeer 823865]

It was the only reason that made me use Kaspersky in the first place. It was the perfect set-and-forget setup especially if you're not experienced enough to play with settings. Too bad!

In business development, code cost-saving is golden rule.

 

[Evjl's Rain]

They dropped it? Why?

1/ it's almost identical to Application Control + changing 1 option (change trust group for unknown applications -> untrusted)
2/ TAM much slower

 

[Outpost]

It was the only reason that made me use Kaspersky in the first place. It was the perfect set-and-forget setup especially if you're not experienced enough to play with settings. Too bad!

Yes, TAM was practical, especially in situations where the PC is or can be used by people with no experience. The alternative is to the tweaking of Application Control.

 

[Divine_Barakah]

Yes, TAM was practical, especially in situations where the PC is or can be used by people with no experience. The alternative is to the tweaking of Application Control.

I had Kaspersky Internet Security installed on family devices with TAM enabled. It was a total piece of mind.

 

[Outpost]

Disable: TAM (redundant)

 

[Outpost]

Removed AdGuard desktop - Added uBlock Origin

 

[Ink]

Have you thought about switching to a Windows Hello PIN?

It protects your privacy by never having to expose your account login password.

 

[Outpost]

Have you thought about switching to a Windows Hello PIN?
...
It protects your privacy by never having to expose your account login password.

To be honest I had never considered it. Mainly out of laziness. I took your advice.

Sign-in Options: switched from password to PIN

 

[oldschool]

Removed AdGuard desktop - Added uBlock Origin

Why did you switch? Browsing speed?

 

[Outpost]

Why did you switch? Browsing speed?

The navigation speed is virtually identical, but the customization is definitely in favor of uBo.

 

[Outpost]

Set up a Windows logon with a local account.

 

[Outpost]

Removed uBo & Privacy Badger - Added Ghostery

Ghostery has everything I need. Less is more

 

[Outpost]

Removed EEK (unused)

 

[Outpost]

Removed Netcraft (useless for my browsing style)
Switched Ghostery to Privacy Badger (due to too many AdBlock removal alerts)

 

[oldschool]

Privacy Badger

Are you using it with Edge built-in tracking protection?

IIRC I did get some adblock warnings with Privacy Badger. If it doesn't work out for you, maybe Privacy Possum. I've never had any with it.