Advanced Plus Security sirius777's PC Security Config

Thread starter sirius777
Start date Feb 28, 2022
0 Replies
1,361 Views

Layout

Current configurationWindows 10

Revision 1Updated Feb 28, 2022

Jump to discussion

Community rating Not rated yet View setup

Imported from an earlier discussion · awaiting owner confirmation

Showcase only — no advice requestedWhat changed

Staff assessment Advanced Plus Security

Earlier staff assessment. The reviewer, date and configuration version were not recorded. It has not been verified against the current Hub setup.

Assessment history

Device & operating system1

Operating system: Windows 10

Protection & updates7

Real-time protection: Microsoft Defender
Device firewall: Microsoft Defender Firewall
Security updates: Allow security updates
User Account Control (UAC): Always notify
Custom security settings: Simple Windows Hardening

Configure Defender > HIGH

Controlled folder access (ransomware protection)

Firewall Hardening > LOLBins + Recommended H_C

Enabled block at first sight via Local Group Policy Editor

Enabled network protection

Disabled Windows Script Host

Microsoft Defender > sandbox

Enabled Secure Boot
Periodic malware scanners: Microsoft Defender Offline Scan
Kaspersky Virus Removal Tool
Emsisoft Emergency Kit
Malware sample testing: I do not participate in malware testing

Browser & privacy4

Browsers and extensions: Browsers:

Microsoft Edge

Google Chrome

Brave

Firefox

Extensions:

uBlock Origin > Advanced user, Prevent WebRTC from leaking local IP addresses, Block CSP reports, Disable JavaScript, Block remote fonts, blocked 3rd party frames, blocked 3rd-party (hard mode), and custom rules.

Facebook Container (Firefox only)

Chrome, Edge, and Brave flags:

#strict-origin-isolation

Microsoft Edge additional settings:

Microsoft Defender SmartScreen

Block potentially unwanted apps

Tracking protection > balanced

Secure DNS

Google Chrome additional settings:

Enhanced protection

Secure DNS

Brave additional settings:

Secure DNS

Clear browsing data on exit

Firefox additional settings:

Tracking protection > strict

Secure DNS

Custom exploit protection settings for browsers:

Block low integrity images - ON

Block remote images - ON

Block untrusted fonts - ON

Code integrity guard - ON (Also allow loading of images signed by Microsoft Store) ----> only for Microsoft Edge

Control flow guard (CFG) - ON

Data execution prevention (DEP) - ON + Enable trunk emulation

Disable extension points - ON

Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images

Randomize memory allocations (Bottom-up ASLR) - ON + Don't use high entropy

Validate exception chains (SEHOP) - ON

Validate handle usage - ON

Validate heap integrity - ON

Validate image dependency integrity - ON
Secure DNS: Microsoft Edge, Firefox, and Brave: Cloudflare
Google Chrome: Google DNS
Desktop VPN: Windscribe
Password and passkey manager: KeePass portable and KeePassXC

Backup & recovery2

File and photo backups: External hard drive (copy and paste)

AOMEI Backupper Pro

Google Drive

Mega
System recovery: AOMEI Backupper Pro

Device & usage4

Main use of this computer: For home and private use
Maintenance tools: Samsung Magician

Storage Sense
Computer specs: Device: ASUS A455L
CPU: Intel Core i5-5200U (2.7GHz)
GPU: GeForce 930m
RAM: 8GB
Storage: 250GB SAMSUNG 860 EVO SSD
Notable changes: Not much has changed since 2021.

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

Not rated yet

An open invitation for useful feedback.

Go to discussion

Shared by the member. This is a configuration record, not a device scan.

Archived configuration (not current) · expand details

Thread details

Last updated: Feb 28, 2022

Main use of this computer: For home and private use

Operating system: Windows 10

On-device encryption

Device sign-in security

Security updates: Allow security updates

User Account Control (UAC): Always notify

Smart App Control

Network firewall

Real-time protection: Microsoft Defender

Device firewall: Microsoft Defender Firewall

Custom security settings

Simple Windows Hardening
Configure Defender > HIGH
Controlled folder access (ransomware protection)
Firewall Hardening > LOLBins + Recommended H_C
Enabled block at first sight via Local Group Policy Editor
Enabled network protection
Disabled Windows Script Host
Microsoft Defender > sandbox
Enabled Secure Boot

Periodic malware scanners: Microsoft Defender Offline Scan
Kaspersky Virus Removal Tool
Emsisoft Emergency Kit

Malware sample testing: I do not participate in malware testing

Browsers and extensions

Browsers:
- Microsoft Edge
- Google Chrome
- Brave
- Firefox

Extensions:
- uBlock Origin > Advanced user, Prevent WebRTC from leaking local IP addresses, Block CSP reports, Disable JavaScript, Block remote fonts, blocked 3rd party frames, blocked 3rd-party (hard mode), and custom rules.
- Facebook Container (Firefox only)

Chrome, Edge, and Brave flags:
- #strict-origin-isolation

Microsoft Edge additional settings:
- Microsoft Defender SmartScreen
- Block potentially unwanted apps
- Tracking protection > balanced
- Secure DNS

Google Chrome additional settings:
- Enhanced protection
- Secure DNS

Brave additional settings:
- Secure DNS
- Clear browsing data on exit

Firefox additional settings:
- Tracking protection > strict
- Secure DNS

Custom exploit protection settings for browsers:
- Block low integrity images - ON
- Block remote images - ON
- Block untrusted fonts - ON
- Code integrity guard - ON (Also allow loading of images signed by Microsoft Store) ----> only for Microsoft Edge
- Control flow guard (CFG) - ON
- Data execution prevention (DEP) - ON + Enable trunk emulation
- Disable extension points - ON
- Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images
- Randomize memory allocations (Bottom-up ASLR) - ON + Don't use high entropy
- Validate exception chains (SEHOP) - ON
- Validate handle usage - ON
- Validate heap integrity - ON
- Validate image dependency integrity - ON