Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 899818" data-attributes="member: 32260">When something is blocked, then usually you get the Windows alert. The details can be seen in the SWH Log. Some actions are rarely blocked by Windows without alert (like in SysHardener).SysHardener default settings are not so restrictive as the SWH default setup. So, usually the opposite is true.You can make SysHardener stronger by ticking all options, but this is not recommended because SysHardener does not have a log of blocked processes, so you will have problems with identifying what setting is the issue. It does not also allow whitelisting, so one blocked BAT script required to run Intel or AMD firmware, will cause you to disable protection of all BAT scripts, etc.Most of these problems can be solved when using SWH + FirewallHardening. The FirewallHardening tool is an enhanced version of the SysHardener part related to blocking Internet access to LOLBins:[URL unfurl=&quot;true&quot;]https://github.com/AndyFul/ConfigureDefender/blob/master/H_C_HardeningTools.zip[/URL]This setup is stronger and safer for the user than tweaked SysHardener, because of using detailed Logs and whitelisting.If you need simple and basic protection (no whitelisting), then you can use SysHardener on default settings. If you need something stronger and more comprehensive then go for SWH.</blockquote>

[QUOTE="Andy Ful, post: 899818, member: 32260"] When something is blocked, then usually you get the Windows alert. The details can be seen in the SWH Log. Some actions are rarely blocked by Windows without alert (like in SysHardener). SysHardener default settings are not so restrictive as the SWH default setup. So, usually the opposite is true. You can make SysHardener stronger by ticking all options, but this is not recommended because SysHardener does not have a log of blocked processes, so you will have problems with identifying what setting is the issue. It does not also allow whitelisting, so one blocked BAT script required to run Intel or AMD firmware, will cause you to disable protection of all BAT scripts, etc. Most of these problems can be solved when using SWH + FirewallHardening. The FirewallHardening tool is an enhanced version of the SysHardener part related to blocking Internet access to LOLBins: [URL unfurl="true"]https://github.com/AndyFul/ConfigureDefender/blob/master/H_C_HardeningTools.zip[/URL] This setup is stronger and safer for the user than tweaked SysHardener, because of using detailed Logs and whitelisting. If you need simple and basic protection (no whitelisting), then you can use SysHardener on default settings. If you need something stronger and more comprehensive then go for SWH. [/QUOTE]

Verification