Advanced Plus Security sirius777's PC Security Config

PC Setup Configuration Help & Showcase
0 Replies 1,337 Views
Original forum configuration · expand details
Last updated
Feb 28, 2022
Main use of this computer
For home and private use
Operating system
Windows 10
On-device encryption
Device sign-in security
Security updates
Allow security updates
User Account Control (UAC)
Always notify
Smart App Control
Network firewall
Real-time protection
Microsoft Defender
Device firewall
Microsoft Defender Firewall
Custom security settings
  • Simple Windows Hardening
  • Configure Defender > HIGH
  • Controlled folder access (ransomware protection)
  • Firewall Hardening > LOLBins + Recommended H_C
  • Enabled block at first sight via Local Group Policy Editor
  • Enabled network protection
  • Disabled Windows Script Host
  • Microsoft Defender > sandbox
  • Enabled Secure Boot
Periodic malware scanners
Microsoft Defender Offline Scan
Kaspersky Virus Removal Tool
Emsisoft Emergency Kit
Malware sample testing
I do not participate in malware testing
Browsers and extensions
  • Browsers:
    • Microsoft Edge
    • Google Chrome
    • Brave
    • Firefox

  • Extensions:
    • uBlock Origin > Advanced user, Prevent WebRTC from leaking local IP addresses, Block CSP reports, Disable JavaScript, Block remote fonts, blocked 3rd party frames, blocked 3rd-party (hard mode), and custom rules.
    • Facebook Container (Firefox only)

  • Chrome, Edge, and Brave flags:
    • #strict-origin-isolation

  • Microsoft Edge additional settings:
    • Microsoft Defender SmartScreen
    • Block potentially unwanted apps
    • Tracking protection > balanced
    • Secure DNS

  • Google Chrome additional settings:
    • Enhanced protection
    • Secure DNS

  • Brave additional settings:
    • Secure DNS
    • Clear browsing data on exit

  • Firefox additional settings:
    • Tracking protection > strict
    • Secure DNS

  • Custom exploit protection settings for browsers:
    • Block low integrity images - ON
    • Block remote images - ON
    • Block untrusted fonts - ON
    • Code integrity guard - ON (Also allow loading of images signed by Microsoft Store) ----> only for Microsoft Edge
    • Control flow guard (CFG) - ON
    • Data execution prevention (DEP) - ON + Enable trunk emulation
    • Disable extension points - ON
    • Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images
    • Randomize memory allocations (Bottom-up ASLR) - ON + Don't use high entropy
    • Validate exception chains (SEHOP) - ON
    • Validate handle usage - ON
    • Validate heap integrity - ON
    • Validate image dependency integrity - ON
Secure DNS
Microsoft Edge, Firefox, and Brave: Cloudflare
Google Chrome: Google DNS
Desktop VPN
Windscribe
Password and passkey manager
KeePass portable and KeePassXC
Maintenance tools
  • Samsung Magician
  • Storage Sense
File and photo backups
  • External hard drive (copy and paste)
  • AOMEI Backupper Pro
  • Google Drive
  • Mega
System recovery
AOMEI Backupper Pro
Usage and exposure
    • Visiting familiar websites
    • Opening email attachments
    • Online shopping and card payments
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Sharing and receiving files and torrents
Computer specs
Device: ASUS A455L
CPU: Intel Core i5-5200U (2.7GHz)
GPU: GeForce 930m
RAM: 8GB
Storage: 250GB SAMSUNG 860 EVO SSD
Notable changes
Not much has changed since 2021.
Feedback preference

Showcase only - no advice requested

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top