New Update Simple Windows Hardening

[Gandalf_The_Grey]

No update (new certificate) for Simple Windows Hardening ?

 

[Andy Ful]

No update (new certificate) for Simple Windows Hardening ?

SimpleWindowsHardening is now a default setup of WHHLight.
SimpleWindowsHardening = WHHLight with < SWH > = ON ( < SmartScreen BlockMode > = OFF and < WDAC > = OFF ).

 

[Gandalf_The_Grey]

SimpleWindowsHardening is now a default setup of WHHLight.
SimpleWindowsHardening = WHHLight with < SWH > = ON ( < SmartScreen BlockMode > = OFF and < WDAC > = OFF ).

So, that means that Simple Windows Hardening is now depreciated?

I miss it's flexibility to adjust different settings compared to the SWH part of WHHLight:

But maybe Hard_Configurator is more suited for people that want to adjust those settings.

 

[czesetfan]

Maybe it is mentioned here somewhere, but how to optimally switch from Simple Windows Hardening to Windows Hybrid Hardening Light (WHHLight).

 

[Andy Ful]

Maybe it is mentioned here somewhere, but how to optimally switch from Simple Windows Hardening to Windows Hybrid Hardening Light (WHHLight).

Run WHHLight (that is all).

 

[Andy Ful]

But maybe Hard_Configurator is more suited for people that want to adjust those settings.

SImpleWindowsHardening is still an interesting project, so I have not decided yet what to do. It is still fully functional and can be used as a replacement for WHHLight.

 

[czesetfan]

SImpleWindowsHardening is still an interesting project, so I have not decided yet what to do. It is still fully functional and can be used as a replacement for WHHLight.

That is, who wants to stay doesn't have to make changes?

 

[Andy Ful]

That is, who wants to stay doesn't have to make changes?

Yes.

 

[South Park]

So, that means that Simple Windows Hardening is now depreciated?

I miss it's flexibility to adjust different settings compared to the SWH part of WHHLight:
View attachment 284283
But maybe Hard_Configurator is more suited for people that want to adjust those settings.

I went back to SWH on Windows 10 because I like those extra settings, esp. the ability to prevent unsigned exe's from running as admin.

 

[Andy Ful]

I went back to SWH on Windows 10 because I like those extra settings, esp. the ability to prevent unsigned exe's from running as admin.

I implemented the most important SWH options (and one new) in the next WHHLight version.

 

[dronefox1166]

Hello !


Can I use these tools together?

“ConfigureDefender + FirewallHardening + SimpleWindowsHardening (without having installed H_C ) + Fort Firewall”

What about SWH?

 

[oldschool]

Can I use these tools together?

“ConfigureDefender + FirewallHardening + SimpleWindowsHardening (without having installed H_C ) + Fort Firewall”

Definitely, for the first three, but I don't know if Fort can be used with Windows Firewall. The Firewall Hardening Tool only adds rules to WFW.

 

[Parkinsond]

Definitely, for the first three, but I don't know if Fort can be used with Windows Firewall. The Firewall Hardening Tool only adds rules to WFW.

Fort firewall has its own driver; it disables WF, so Firewall Hardening has no role.
But simplewall can be used alongside to WF; you get the benefits of Firewall Hardening.

 

[Andy Ful]

Hello !


Can I use these tools together?

“ConfigureDefender + FirewallHardening + SimpleWindowsHardening (without having installed H_C ) + Fort Firewall”

Yes.
https://malwaretips.com/threads/firewallhardening-tool.112228/post-1125068

 

[dronefox1166]

Hello

This is "Ok" like that with paranoid extensions enabled ?

How to allow PowerShell scripts here at the end like "*Allow EXE files" ? if it is possible ?
I have blocked PS1 etc. into PARANOID EXTENSION so even if Admin Powershell scripts are allowed...
This is good ?

for basic security ?

 

[dronefox1166]

I have changed one rule, because, with these rules, the app with *.exe in downloads, doesn't work...
* Elevation of Unsigned Executables * Restricted to Allowed :=)

 

[Andy Ful]

How to allow PowerShell scripts here at the end like "*Allow EXE files" ? if it is possible ?

Do you use Powershell scripts?

 

[dronefox1166]

Do you use Powershell scripts?

For using Chris Titus Tech WinUtil tool... But no finally. Thanks. It is more secure to restrict all type of scripts.

 

[dronefox1166]

Now like this :=) it is ok for me. Thanks !

 

[Andy Ful]

It is more secure to restrict all type of scripts.

PowerShell scripts are commonly abused, so it is better to block them.