Advanced Security purple.kitt Security Config 2022

[purple.kitty]

My first post here

 

[silversurfer]

Periodic security scanners: 1 weekly with Microsoft Defender

MD is your AV as real-time protection, so would make more sense to use a different engine as periodic security scanner: HMP, NPE, EEK, KVRT (choose one or two).

 

[Kongo]

My first post here

"Windows Hardened"

What do you mean by this?

 

[Soulbound]

"Windows Hardened"

What do you mean by this?

first thing that came to mind was windows hardening tool but not sure as i havent kept up to date with the tools that were popular around a year ago. Then again i could be wrong.


To op: have a question: how long it took you to fully setup your config? also you do pentesting in same system or separate system (non vm)?

 

[Kongo]

first thing that came to mind was windows hardening tool but not sure as i havent kept up to date with the tools that were popular around a year ago. Then again i could be wrong.

Might be the tools of Andy like Simple Windows Hardening or Hard_Configurator which are pretty popular here on MT. Let's wait for his reply.

 

[Arequire]

MD is your AV as real-time protection, so would make more sense to use a different engine as periodic security scanner: HMP, NPE, EEK, KVRT (choose one or two).

Especially since Defender's on-demand scan doesn't utilize cloud protection.

 

[purple.kitty]

MD is your AV as real-time protection, so would make more sense to use a different engine as periodic security scanner: HMP, NPE, EEK, KVRT (choose one or two).

I'm in doubt cuz my setup is aimed for privacy and security, having an av will not decrease privacy?

 

[purple.kitty]

first thing that came to mind was windows hardening tool but not sure as i havent kept up to date with the tools that were popular around a year ago. Then again i could be wrong.


To op: have a question: how long it took you to fully setup your config? also you do pentesting in same system or separate system (non vm)?

yeah I used Hard_Configurato and ConfigureDefender.
I did it during this month, but in total like 5 days? more or less I mean setting up the vms also(kali, arch, qubeos and another windows 10)

 

[Soulbound]

I'm in doubt cuz my setup is aimed for privacy and security, having an av will not decrease privacy?

its an on demand second opinion solution, so no impact at all.

 

[Soulbound]

yeah I used Hard_Configurato and ConfigureDefender.
I did it during this month, but in total like 5 days? more or less I mean setting up the vms also(kali, arch, qubeos and another windows 10)

arch, i assume you are referring to BlackArch which is designed for pentesting. If you are however using vanilla Arch, then give BA a try.

Depending on your Linux knowledge, Pentoo is also recommended although not everyone is familiar enough with Gentoo to begin with.

Also Blackbox should be up your alley since it is based off Ubuntu.

 

[Kongo]

its an on demand second opinion solution, so no impact at all.

Not necessarily. Even second opinion scanners can upload data to their could for analysis purposes. Still, it probably helps more than it harms.