Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 892572" data-attributes="member: 32260">
<ul>
<li data-xf-list-type="ul">SysHardener shares a similar idea (reducing the attack surface), but uses other methods that do not support whitelisting.</li>
<li data-xf-list-type="ul">SWH allows us to see what has been silently blocked (&lt;View Blocked Events&gt;).</li>
<li data-xf-list-type="ul">SWH is more restrictive (smaller attack surface), but allows whitelisting (&lt;Manage the Whitelist&gt;).</li>
<li data-xf-list-type="ul">SWH displays the current restrictions (important if one has more than one computer).</li>
<li data-xf-list-type="ul">Changing or turning OFF/ON the settings in SysHardener requires rebooting. In SWH one can change or switch OFF/ON the settings in a second - no need to reboot or Log OFF the user account (only changes to SMB protocols require rebooting).</li>
</ul>Generally, one can use SysHardener on default settings as a basic hardening. On many computers, it will work as a &quot;set and forget&quot; setup.If one wants something stronger, then SysHardener has to be tweaked and this will often block something. The user can have a problem because SysHardener does not show if something has been blocked and what has been blocked. Furthermore, one blocked legal script can force the user to skip some important SysHardener features and weaken the overall security.In the case above, one can use Simple Windows Hardening for stronger and more configurable protection.</blockquote>

[QUOTE="Andy Ful, post: 892572, member: 32260"] [LIST] [*]SysHardener shares a similar idea (reducing the attack surface), but uses other methods that do not support whitelisting. [*]SWH allows us to see what has been silently blocked ([COLOR=rgb(41, 105, 176)][B]<View Blocked Events>[/B][/COLOR]). [*]SWH is more restrictive (smaller attack surface), but allows whitelisting ([B][COLOR=rgb(41, 105, 176)]<Manage the Whitelist>[/COLOR][/B]). [*]SWH displays the current restrictions (important if one has more than one computer). [*]Changing or turning OFF/ON the settings in SysHardener requires rebooting. In SWH one can change or switch OFF/ON the settings in a second - no need to reboot or Log OFF the user account (only changes to SMB protocols require rebooting). [/LIST] Generally, one can use SysHardener on default settings as a basic hardening. On many computers, it will work as a "set and forget" setup. If one wants something stronger, then SysHardener has to be tweaked and this will often block something. The user can have a problem because SysHardener does not show if something has been blocked and what has been blocked. Furthermore, one blocked legal script can force the user to skip some important SysHardener features and weaken the overall security. In the case above, one can use Simple Windows Hardening for stronger and more configurable protection. [/QUOTE]

Verification