New Update Simple Windows Hardening

[ColonelMal]

If I run Comodo Antivirus with Internet Security and Simple Windows Hardening is there anything that I should bear in mind or change in the settings of either program?

 

[ErzCrz]

If I run Comodo Antivirus with Internet Security and Simple Windows Hardening is there anything that I should bear in mind or change in the settings of either program?

As long as you mark any SWH files as trusted, there shouldn't be an issue.See this post: Update - Hard_Configurator - Windows Hardening Configurator

 

[Overkill]

Can I run these 2 without any issues?

Why I ask, watch the very short video...

Video 2020 11 30 104839

Upload and share videos instantly. It's free and simple. No signup required.

sendvid.com

 

[Andy Ful]

Can I run these 2 without any issues?
View attachment 250069
Why I ask, watch the very short video...

Video 2020 11 30 104839

Upload and share videos instantly. It's free and simple. No signup required.

sendvid.com

You cannot and you should not. The first (SWH) was created for people who do not want to use the second (H_C). If you like the second, then the first is useless. If you like to use the Documents Anti-Exploit tool, then it is available as a standalone application:
Download (github.com)

Be safe.

Edit.
One can correct the behavior of SWH spoiled by SwitchDefaultDeny by choosing :
<Settings> <Apply Basic Recommended Settings>

 

[Overkill]

You cannot and you should not. The first (SWH) was created for people who do not want to use the second (H_C). If you like the second, then the first is useless. If you like to use the Documents Anti-Exploit tool, then it is available as a standalone application:
Download (github.com)

Be safe.

Edit.
One can correct the behavior of SWH spoiled by SwitchDefaultDeny by choosing :
<Settings> <Apply Basic Recommended Settings>

Is there any overlap with SwitchDefaultDeny since I have VS Pro?

 

[ErzCrz]

Is there any overlap with SwitchDefaultDeny since I have VS Pro?

That default deny switch temporarily turns off SRP for when you have issues with installing software with H_C installed with recommended settings. (see below help) that pops up when you click on the button. There's full help files and manuals in H_C and SH.

rules to

 

[oldschool]

@Overkill you really are overkill with that setup.

 

[Gandalf_The_Grey]

Is there any overlap with SwitchDefaultDeny since I have VS Pro?

@Overkill can you update your security config, so that we can discuss this there?

A very simplified explanation of both tools is:
The tools from @Andy Ful HardConfigurator and Simple Windows Hardening use Windows internal options to strengthen/harden the system.
Normally you don't need SwitchDefaultDeny unless something is not working in your system and you don't have time to research how to whitelist it.
VoodooShield is IMO more an addon to your current AV solution.
Please don't kill me @danb for saying this

Like @ErzCrz mentioned there is a lot of help available in Andy's tools and in the manuals

 

[Andy Ful]

Is there any overlap with SwitchDefaultDeny since I have VS Pro?

SwitchDefaultDeny is a part of Hard_Configurator. Do you use both H_C and VS? There is no need to use both H_C and VS (two default deny applications). Just use VS if you like it, or use SWH instead. SWH is a simplified version of H_C which was intended for semi-advanced users (EXE and MSI files are not blocked).

H_C is more complex and has several setting profiles that are more restrictive than SWH. But it is intended rather for protecting the computers of inexperienced users who can accidentally run EXE or MSI files embedded in spam attachments or can ignore SmartScreen Application Reputation alerts. So you could use H_C to protect the computers of your family members. H_C has got also ConfigureDefender and FirewallHardening integrated into one GUI.

 

[Overkill]

@Overkill you really are overkill with that setup.

Hence my username lol

 

[Overkill]

SwitchDefaultDeny is a part of Hard_Configurator. Do you use both H_C and VS? There is no need to use both H_C and VS (two default deny applications). Just use VS if you like it, or use SWH instead. SWH is a simplified version of H_C which was intended for semi-advanced users (EXE and MSI files are not blocked).

H_C is more complex and has several setting profiles that are more restrictive than SWH. But it is intended rather for protecting the computers of inexperienced users who can accidentally run EXE or MSI files embedded in spam attachments or can ignore SmartScreen Application Reputation alerts. So you could use H_C to protect the computers of your family members. H_C has got also ConfigureDefender and FirewallHardening integrated into one GUI.

I have Hard_Configurator mainly for ConfigureDefender, so I can just ignore SwitchDefaultDeny? If I do use SwitchDefaultDeny, it's not really hurting my system since it's based on SRP and VS works differently correct?

 

[Overkill]

@Overkill can you update your security config, so that we can discuss this there?

I will create a new security config asap

 

[Overkill]

You cannot and you should not. The first (SWH) was created for people who do not want to use the second (H_C). If you like the second, then the first is useless. If you like to use the Documents Anti-Exploit tool, then it is available as a standalone application:
Download (github.com)

Be safe.

Edit.
One can correct the behavior of SWH spoiled by SwitchDefaultDeny by choosing :
<Settings> <Apply Basic Recommended Settings>

Okay, I downloaded the zip of stand-alone tools and clicked on Documents Anti-Exploit tool and nothing opened
I read about it and saw the gui so I am guessing if the 2 apps aren't installed it just won't do anything?
I just was curious about it and wanted to check it out.

 

[Gandalf_The_Grey]

I have Hard_Configurator mainly for ConfigureDefender, so I can just ignore SwitchDefaultDeny? If I do use SwitchDefaultDeny, it's not really hurting my system since it's based on SRP and VS works differently correct?

In that case uninstall Hard_Configurator and use the standalone ConfigureDefender :

GitHub - AndyFul/ConfigureDefender: Utility for configuring Windows 10 built-in Defender antivirus settings.

Utility for configuring Windows 10 built-in Defender antivirus settings. - AndyFul/ConfigureDefender

github.com

I think SwitchDefaultDeny does nothing in your system when SRP is not configured and VS works differently.

 

[Gandalf_The_Grey]

Okay, I downloaded the zip of stand-alone tools and clicked on Documents Anti-Exploit tool and nothing opened
I read about it and saw the gui so I am guessing if the 2 apps aren't installed it just won't do anything?
I just was curious about it and wanted to check it out.

Did you extract it?

 

[Overkill]

Did you extract it?

Yes

 

[Gandalf_The_Grey]

Yes

Strange, maybe Andy has something more helpful to say...

 

[Andy Ful]

Okay, I downloaded the zip of stand-alone tools and clicked on Documents Anti-Exploit tool and nothing opened
I read about it and saw the gui so I am guessing if the 2 apps aren't installed it just won't do anything?
I just was curious about it and wanted to check it out.

It is probably blocked by something (a common issue in overkill setup).

 

[Andy Ful]

@Overkill,
It will be better to continue in the thread about your current config. This thread is not appropriate for such a config.

 

[Overkill]

It is probably blocked by something (a common issue in overkill setup).

I had no alerts. If I don't have Adobe or Office installed, should the GUI still open?