New Update Simple Windows Hardening

[JasonUK]

Hi,

I've previously used SysHardener (Suggested Settings) in conjunction with WD & ConfigureDefender (Hard Settings) having avoided Hard_Configurator as it was way over my head. It looks like I could now use SWP instead of SysHardener... I prefer to use tools from same developer to avoid unwanted overlaps / conflicts where possible. My query is whether SWP will at some point have option to switch on 'Forced Smartscreen' (the missing part of H_C Basic Rec. Settings) rather than having to use a third tool - Run-By-Smartscreen? Hopefully I've understood roles of Forced SmartScreen vs Run-By-Smartscreen!

 

[Andy Ful]

Hi,

I've previously used SysHardener (Suggested Settings) in conjunction with WD & ConfigureDefender (Hard Settings) having avoided Hard_Configurator as it was way over my head. It looks like I could now use SWP instead of SysHardener... I prefer to use tools from same developer to avoid unwanted overlaps / conflicts where possible. My query is whether SWP will at some point have option to switch on 'Forced Smartscreen' (the missing part of H_C Basic Rec. Settings) rather than having to use a third tool - Run-By-Smartscreen? Hopefully I've understood roles of Forced SmartScreen vs Run-By-Smartscreen!

Forced SmartScreen set to Standard User in H_C works in a very similar way to RunBySmartscreen. The main difference is that the executable which is used by Forced SmartScreen is located in %WinDir%\Hard\Configurator and the executable which is used by RunBySmartscreen is located in %WinDir%. Most of the code is shared by both solutions.
On Windows 8+, RunBySmartscreen is useful alone, or with SysHardener, or with SWH, or with any solution which allows EXE and MSI files.

Although SWH is much easier to understand and use as compared to H_C, it is still not for novice users. But, with a little learning, it can be helpful for the average MT member.
You can try it. If you will do not like it then simply use:
Menu >> Restore Windows Defaults

 

[JasonUK]

Thanks for reply.

I'm not a total novice so SWH should be okay as I'll be able to see any blocked event... I know pretty much how my computer normally operates so if something changes post-installation I'll have a good idea where to look and restore defaults if all else fails

 

[Kermit80]

Sorry, I have not found what license it was released with. Is SWH free for commercial use?

 

[Andy Ful]

Sorry, I have not found what license it was released with. Is SWH free for commercial use?

The SWH application digitally signed by me can be used for free in the home environment or businesses. I will upload the license info to GitHub today.
Please bear in mind that if you want to use it on computers connected to the local network with remote management, you need additional protection against the local network threats.

 

[JasonUK]

One question please... I run all my portable programs from sub-directories in D:/Portable/ ... can you whitelist a folder, sub-directories and all executables files in one whitelisting rule or do you have to do each program individually?

 

[Kermit80]

The SWH application digitally signed by me can be used for free in the home environment or businesses. I will upload the license info to GitHub today.
Please bear in mind that if you want to use it on computers connected to the local network with remote management, you need additional protection against the local network threats.

got it! Thanks. I like it very much so far. Are blocked events notified to the user?

 

[RoboMan]

Ah yes, I see you used my GUI prototype

just kidding, nice release! Loving it!

 

[RoboMan]

Simple Windows Hardening is a fantastic replacement for those who don't want to pay for SysHardener or OSA.

 

[ForgottenSeer 85179]

One question please... I run all my portable programs from sub-directories in D:/Portable/ ... can you whitelist a folder, sub-directories and all executables files in one whitelisting rule or do you have to do each program individually?

You can whitelist files and/ or folder.

Also for security reasons you should use Windows Program folder and install your programs to that, so they're protected by UAC

 

[Andy Ful]

One question please... I run all my portable programs from sub-directories in D:/Portable/ ... can you whitelist a folder, sub-directories and all executables files in one whitelisting rule or do you have to do each program individually?

In SWH all EXE and MSI applications are already whitelisted, so most of your portable applications will not require additional whitelisting. If the portable application will use scripts then simply whitelist the blocked scripts. If you use many scripts in one folder in UserSpace then whitelist this folder.

 

[Andy Ful]

got it! Thanks. I like it very much so far. Are blocked events notified to the user?

Usually, you will see only the enigmatic Windows alert. In some cases, the file will be blocked silently. The blocks will be rare. It is good to look from time to time into the SWH Logs (<View Blocked Events>).

 

[Andy Ful]

Ah yes, I see you used my GUI prototype

View attachment 243848

just kidding, nice release! Loving it!

It is possible. I cannot say if the final GUI has emerged from SwitchDefaultDeny GUI or your proposition.

 

[JasonUK]

In SWH all EXE and MSI applications are already whitelisted, so most of your portable applications will not require additional whitelisting. If the portable application will use scripts then simply whitelist the blocked scripts. If you use many scripts in one folder in UserSpace then whitelist this folder.

Okay thanks got it now. I had tried to whitelist a folder & its sub-directories but it hadn't seemed to work hence query... it's since clicked that it wasn't the files in the folder causing the 'system admin has blocked' message, it was the shortcut file I was using... you live and learn and need to read the blocked events log properly!

 

[Andy Ful]

Okay thanks got it now. I had tried to whitelist a folder & its sub-directories but it hadn't seemed to work hence query... it's since clicked that it wasn't the files in the folder causing the 'system admin has blocked' message, it was the shortcut file I was using... you live and learn and need to read the blocked events log properly!

You probably have read the SRP help to know that shortcuts have to be whitelisted via <Add Path*Wildcards>.

 

[paulderdash]

Andy, is SWH the new CUP or SSS, or neither?

 

[Andy Ful]

Andy, is SWH the new CUP or SSS, or neither?

WD + SWH = SSS

 

[ForgottenSeer 85179]

Andy, is SWH the new CUP or SSS, or neither?

WD + SWH = SSS

So much program short names. And even more exists here.
My head:

 

[Jan Willy]

Make your choice:
SSS = Simple, Smart & Solid
or
SSS = Simple Stupid Security
The question is, which of both is your CUP of tea?

 

[Andy Ful]

Make your choice:
SSS = Simple, Smart & Solid
or
SSS = Simple Stupid Security
The question is, which of both is your CUP of tea?

Simple Stupid Security was mentioned here:

Advice Request - Simple Stupid Security vs. free AV

Simple Stupid Security (SSS) Imagine that you have an option in Windows Defender on Windows 10, which could turn ON/OFF the below restrictions: Block Windows scripts (JScript, VBScript, PowerShell) and Java files (JAR). Set SmartScreen to 'Block' (the user cannot bypass SmartScreen). Would...

malwaretips.com

as an alternative for top free AVs.
It was rather an old idea and evolved into SWH which can be also used with any AV (although the free AVs can gain more).