New Update Testing ConfigureDefenderPM (Policy Manager version)

[rashmi]

Can I replace Defender hardening consol with ConfigureDefender and FirewallHardening,with an improvement?,a Ai calls the configure Defender(The gold standard) I have appguard usually on locked down?

What is the Defender hardening console, DefenderUI/DUI? The improvement will be firewall rules with FirewallHardening. You should try the Hard_Configurator suite: ConfigureDefender, FirewallHardening, and Hard_Configurator, all with recommended settings; you will not find as easy/set-and-forget default-deny/smart protection! Do remove AppGuard if you decide to try the Hard_Configurator suite.

 

[oldschool]

Can I replace Defender hardening consol with ConfigureDefender and FirewallHardening,with an improvement?,a Ai calls the configure Defender(The gold standard) I have appguard usually on locked down?

You won't see any improvement by switching since you already have two powerful programs in DHC and Appguard. Just make sure your browsers are secured with web filtering of some kind.

 

[Andy Ful]

Can I replace Defender hardening consol with ConfigureDefender and FirewallHardening,with an improvement?

DHC shares many features with ConfigureDefender.
Deep Firewall Control is a strong feature, but essentially different from FirewallHardening. Both protect against different attack vectors.
AppGuard Solo can restrict/contain some important LOLBins, but most of them can still make outbound connections.
You could add FirewallHardening to AppGuard and DHC setup, but I am afraid that such a setup would be unnecessarily complex for home usage.

 

[SeriousHoax]

Forgot to say thanks for creating this since, as you know, it solves MD's exclusion issue that I always hated.
BTW, I think this is the first time I have seen this ASR rule in action. It blocked a portable curl that I have, which comes with http3 support that the built-in curl lacks.
When I tried to use it, it was blocked as it should be.

But when I tried to add it to the ASR exclusion, it wasn't letting me,

It worked after disabling MD. Then I could add the exclusion. I haven't had a ASR rule blocking something in a while so didn't remember that disabling the protection is needed.

 

[Parkinsond]

I think this is the first time I have seen this ASR rule in action

I had it in action twice.
One time when trying to install a newer vesion of Realtek audio driver, downloaded from Hp website, than that installed by WU.
The second time during uinstalling of AVG.

I have it disabled all the time.

 

[Andy Ful]

But when I tried to add it to the ASR exclusion, it wasn't letting me,
View attachment 299247
It worked after disabling MD. Then I could add the exclusion.

The ASR exclusions can be added in two ways:

1. Temporarily setting the concrete ASR rule to Audit + adding an ASR exclusion.
2. Temporarily disabling real-time protection + adding an ASR exclusion.