Basic Security TairikuOkami's Configuration 2020

[TairikuOkami]

Removed Panda again, webpages were loading way too slow, even though I had only Panda realtime active and I gave up on Google, it has a terrible font.
I enabled CompactOS (saved 2GB), Notifications, OneDrive. I like the personal vault with 2FA (for double encrypted files). I am turning into MS fanboy.

 

[TairikuOkami]

Well, back to Forticlient and it seems to stay for multiple reasons. I previously abandoned it expecting the free version to be discontinued.

1. For once, a realtime AV can be quite handy, it sure would be lame to get infected by like 10 years old malware or a randomly ran ransomware.
2. It is super light, ~160MB RAM and virtually zero CPU/Disk activity. I also like the personal touch, the possibility to set a custom picture/contact.
3. It is a signature based (updates every hour), no false positives and it does not interfere with my scripts like other AVs, except for some Nirsoft tools.
4. Its webfilter filter is excellent, not just against malware, but also in filtering adult content. I am using cleanbrowsingDNS, but only within the browser and it can only block domains, not malicious links. Apart from that, Windows will introduce DoH in 2021, so I might move to Cloudflare altogether because of ESNI.

 

[sepik]

@TairikuOkami
Did you make any modifications to the .conf file? Last time when i tried Forticlient, for some reason, Forti blocked youtube. After some googling, i've found one setting inside .conf file that need to be set "0". I really liked it, how resource friendly it was and the web filter is amazing. But i don't know how effective it is against powershell etc. scripts. For sure, combo like Forticlient+OSA is really effective. But OSA and for example Andy's system hardening softwares does not work if you'r using LTSC. Tried Webroot script blocker too, and it does not work with LTSC.

 

[TairikuOkami]

Did you make any modifications to the .conf file?

No, I am trying to keep it simple for now.

But i don't know how effective it is against powershell etc. scripts.

I have WSH disabled and powershell removed, though Andy has mentioned, that malware can download its own, but hopefully my setup could deal with it.

 

[sepik]

What im using a firewall is SEP. It always ask when legit or not process want to connect to the net. It's a click fest, i know. When the "Click Fest" is over. Then go to SEP settings. In what ip svchost is connectin to? Make it connect to only for update servers. Combine it with Spyhelter Free(disable auto-allow) and with Forticlient. It need a many clicks or so, but when "tamed" its quite powerfull combo.

 

[SeriousHoax]

From where did you download Windows 10 20H2?

 

[TairikuOkami]

From where did you download Windows 10 20H2?

A custom made ISO from deskmodder, but you can made your own from original files:

Select language for Feature update to Windows 10, version 20H2 (19042.541) amd64

Download UUP files from Windows Update servers with ease. This project is not affiliated with Microsoft Corporation.

uupdump.ml

But for the upgrade, I used the Insider version 19042.450, it updates to the latest version anyway.

Download Windows Insider Preview ISO

www.microsoft.com