Advanced Plus Security Stenographers Security Config Surface Laptop Go 2023

Thread starter Stenographers
Start date Jun 15, 2023

Last updated: Jun 15, 2023

How it's used?: For home and private use

Operating system: Windows 10

On-device encryption: VeraCrypt

Log-in security

- Hardware security key
- Biometrics (Windows Hello PIN, TouchID, Face, Iris, Fingerprint)
- Basic account password (insecure)

Security updates: Allow security updates

Update channels: Allow stable updates only

User Access Control: Always notify

Smart App Control

Network firewall: Enabled

About WiFi router: Aruba AP22

Real-time security: Windows Defender

Firewall security

About custom security

All ASR rules enabled
Controlled folder access enabled

Periodic malware scanners: Malwarebytes

Malware sample testing: I do participate in malware testing. See details about my testing environment below.

Environment for malware testing: Separate computer, Thinkpad T470
Ubuntu 22.04
cuckoo sandbox
Virtualbox
Windows 10 VM (no network)

Browser(s) and extensions: Firefox, Libre Wolf
ublock origin
1Password
Mulit account containers

Secure DNS: Self hosted DNS server over HTTPS via Tailscale

Desktop VPN: Proton VPN and Tailscale

Password manager: 1Password

Maintenance tools: Just use powershell for this

File and Photo backup: iCloud

System recovery: Veeam backups to server over Tailscale

Risk factors

- Browsing to popular websites
- Browsing to unknown / untrusted / shady sites
- Making audio/video calls
- Opening email attachments
- Buying from online stores, entering banks card details
- Logging into my bank account
- Downloading software and files from reputable sites
- Streaming audio/video content from trusted sites or paid subscriptions
- Coding and development

Computer specs

Surface laptop Go 1st gen

i5 10th gen
8GB RAM
128GB NVMe

What I'm looking for?: Looking for maximum feedback.

Stenographers

Level 2

Thread author

Jun 15, 2023

#1

Looking for any blind spots in my config or any changes I can implement.

Reactions: harlan4096, Zero Knowledge, kylprq and 1 other person

Kongo

Level 36

Verified

Top Poster

Well-known

Jun 15, 2023

#2

Stenographers said:
Looking for any blind spots in my config or any changes I can implement.

Nice config! Ever thought about tweaking Microsoft Defender with ConfigureDefender or DefenderUI? Also, which third-party firewall are you using?

Reactions: Stenographers, harlan4096, Gandalf_The_Grey and 1 other person

Stenographers

Level 2

Thread author

Jun 15, 2023

#3

Kongo said:
Nice config! Ever thought about tweaking Microsoft Defender with ConfigureDefender or DefenderUI? Also, which third-party firewall are you using?

Safing Portmaster

Thanks! Haven't checked out those, I'll give them a google!

Reactions: Kongo, harlan4096 and Gandalf_The_Grey

Similar threads

Advanced Security R3j3ct's Home Laptop Config 2024

Replies: 12

Views: 1,375

PC Setup Configuration Help & Showcase Feb 15, 2024

R3j3ct

Advanced Plus Security Mycenius PC Configuration 2024

Replies: 7

Views: 748

PC Setup Configuration Help & Showcase Jan 21, 2024

Victor M

Technology Microsoft Weekly: Surface Pro 10 and Laptop 6, a new Microsoft division, and more

Replies: 5

Views: 627

Technology News Sunday at 3:45 AM

Gandalf_The_Grey

Top