Serious Discussion WHHLight - simplified application control for Windows Home and Pro.

[rashmi]

What about the MD logs? Why the different configurations with network protection "ON" on both systems? SSD network inspection: 1 and HDD network inspection: 0 (updated time).

 

[Andy Ful]

What about the MD logs? Why the different configurations with network protection "ON" on both systems? SSD network inspection: 1 and HDD network inspection: 0 (updated time).

ConfigureDefender does not change the Network Inspection System (NIS) settings. It changes NetworkProtection settings. The current NIS settings can be inspected via <Info about Defender>:

 

[rashmi]

ConfigureDefender does not change the Network Inspection System (NIS) settings. It changes NetworkProtection settings. The current NIS settings can be inspected via <Info about Defender>:

View attachment 287787

I thought the ConfigureDefender log contains only CD-related data.

 

[Andy Ful]

I thought the ConfigureDefender log contains only CD-related data.

They are CD-related.
Although some info is only Defender-related.

 

[rashmi]

@Andy Ful, If I use Smart App Control, would you recommend any of your tools?

 

[Andy Ful]

@Andy Ful, If I use Smart App Control, would you recommend any of your tools?

It is hard to recommend a solution to security-oriented guys.
The first problem is whether you can live with your current setup (SAC enabled).
The default Windows 11 built-in setup + SAC + Core Isolation + slightly hardened Edge and Firewall is enough for most people.
There are many possible ways to make this setup stronger, but then you are trying to fight the malware that will probably never attack your computer.

Here is a possible route, if you would like to test step by step the limits of your abilities:

1. FirewallHardening (Recommended H_C).
2. FirewallHardening (Recommended H_C) + ConfigureDefender HIGH.
3. FirewallHardening (Recommended H_C) + ConfigureDefender HIGH + WHHLight (default SWH settings).
4. FirewallHardening (Recommended H_C) + ConfigureDefender MAX + WHHLight (default SWH settings).
5. etc. (additional tweaking, DocumentsAntiExploit).
6. Hard_Configurator

Hard_Configurator includes FirewallHardening, ConfigureDefender, and DocumentsAntiExploit. The Recommended Settings in Hard_Configurator + ConfigureDefender + FirewallHardening + DocumentsAntiExploit are probably the upper limit (still usable) for MT members.
Hard_Configurator can apply more restrictive setting profiles, but such restrictions are intended for special cases.