Advanced Plus Security Stenographers Security Config Surface Laptop Go 2023

Thread starter Stenographers
Start date Jun 15, 2023

Last updated: Jun 15, 2023

How it's used?: For home and private use

Operating system: Windows 10

On-device encryption: VeraCrypt

Log-in security

- Hardware security key
- Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
- Basic account password (insecure)

Security updates: Allow security updates

Update channels: Allow stable updates only

User Access Control: Always notify

Smart App Control

Network firewall: Enabled

About WiFi router: Aruba AP22

Real-time security: Windows Defender

Firewall security

About custom security

All ASR rules enabled
Controlled folder access enabled

Periodic malware scanners: Malwarebytes

Malware sample testing: I do participate in malware testing. See details about my testing environment below.

Environment for malware testing: Separate computer, Thinkpad T470
Ubuntu 22.04
cuckoo sandbox
Virtualbox
Windows 10 VM (no network)

Browser(s) and extensions: Firefox, Libre Wolf
ublock origin
1Password
Mulit account containers

Secure DNS: Self hosted DNS server over HTTPS via Tailscale

Desktop VPN: Proton VPN and Tailscale

Password manager: 1Password

Maintenance tools: Just use powershell for this

File and Photo backup: iCloud

System recovery: Veeam backups to server over Tailscale

Risk factors

- Browsing to popular websites
- Browsing to unknown / untrusted / shady sites
- Making audio/video calls
- Opening email attachments
- Buying from online stores, entering banks card details
- Logging into my bank account
- Downloading software and files from reputable sites
- Streaming audio/video content from trusted sites or paid subscriptions
- Coding and development

Computer specs

Surface laptop Go 1st gen

i5 10th gen
8GB RAM
128GB NVMe

What I'm looking for?: Looking for maximum feedback.

Stenographers

Level 2

Thread author

Jun 15, 2023

#1

Looking for any blind spots in my config or any changes I can implement.

Reactions: harlan4096, Zero Knowledge, kylprq and 1 other person

Kongo

Level 36

Verified

Top Poster

Well-known

Jun 15, 2023

#2

Stenographers said:
Looking for any blind spots in my config or any changes I can implement.

Nice config! Ever thought about tweaking Microsoft Defender with ConfigureDefender or DefenderUI? Also, which third-party firewall are you using?

Reactions: Stenographers, harlan4096, Gandalf_The_Grey and 1 other person

Stenographers

Level 2

Thread author

Jun 15, 2023

#3

Kongo said:
Nice config! Ever thought about tweaking Microsoft Defender with ConfigureDefender or DefenderUI? Also, which third-party firewall are you using?

Safing Portmaster

Thanks! Haven't checked out those, I'll give them a google!

Reactions: Kongo, harlan4096 and Gandalf_The_Grey

Similar threads

Advanced Security Divine Barakah's PC Security Config 2024

2 3 4 5

Replies: 97

Views: 4,038

PC Setup Configuration Help & Showcase Sep 8, 2024

Divine_Barakah

Danger Vitali Low end laptop config 2024

Replies: 17

Views: 486

PC Setup Configuration Help & Showcase Sunday at 5:36 AM

Vitali Ortzi

Advanced Plus Security Nautilus Security Config 2024

Replies: 0

Views: 194

PC Setup Configuration Help & Showcase Oct 3, 2024

Nautilus

Top