What is your security setup these days?

New Setup:
Microsoft Defender: High Protection (ConfigDefender)
TinyWall: Blocklists, Custom Firewall Rules and Password Protected Settings
HitmanPro.Alert: Recommended, Enabled BadUSB
Microsoft Edge: UBlock Origin, LastPass & ExpressVPN
BitLocker: Newer Encryption Enabled
UAC: Always Notify

 

Ready for war.nice

 

Yep I am. I might do a few more tweaks but so far I like how light this setup is.

 

Good job

 

Trying to keep it nice and light and also use some native Windows security as well.

 

Hardening the system you could feel peace of mind as there are too many viruses created every day.

 

Yep I agree.

 

I am trying to be simplistic minimalistic as much as posible.no more than 2 programs per pc

 

Yep I wanted a small amount of 3rd party programs as well but that were also light.

 

Just to be sure

 

Very nice! No more Comodo?

 

Comodo dragon

 

Still running Defender with Controlled Folder Access enabled (I wonder how effective this really is but whatever), augmented by NVTOSArmor v. 1.5.2 and Hard_Configurator Firewall Hardening. I've also set a number of custom outbound firewall rules. I have a static image on a USB stick that is refreshed every time Windows is updated to a new build. Opera browser w/AdGuard for Windows.

I'm a very low-risk user. Should I add or delete anything? Have never been infected, knock wood.

 

I think you are fine with what you have, home users are not targeted by black hats nowadays unless you are a flamboyant filthy rich dude. When you say you have a "static image" of Windows, does that mean is it only the basic OS without any programs? Backup/imaging Windows and data is the most important security layer for all sorts of problems. May I suggest a trial of Macrium Reflect free? It is very reliable and popular with Wilders' members...

 

Thanks, Osaban. Tried Macrium several times, I'm more of a "point-and-click without reading numpty text in a huge window" type of person. So, Aomei Standard was the right choice here. It's the basic OS plus some essential third party utilities, and when the basic OS changes, so does the image.

OK. I've always liked this setup, it lets the machine breathe and run very quickly. But sometimes, you'd like more opinions to avoid getting complacent.

 

Yea wat, I'm not using Comodo anymore. While I really like Comodo and it does a great job, I wanted to try a lighter setup. I'll probably still do a few more tweaks though.

 

Do you use WD anti-exploit protection for installed softwares that is most at risk?
Same question for OSA basic exploit protection?

 

Since I'm running an Insider build so Windows 10 is fully updated, a dedicated anti-exploit isn't direly necessary, far as I'm concerned. No flash player on here, no Java. Ran EMET, then HitmanPro.Alert in 8.1 and earliest versions of Windows 10 but oddly, it was AVG Internet Security that blocked a Java exploit on Yahoo's homepage back then.

I've tried enabling various native exploit mitigations in Program Settings (notably for Edge) but this produced too many false positives and silent blocks. So, I'm not inclined to add any additional anti-exploit measures over and beyond OSArmor's at the moment. Not set in stone, though.

 

AppGuard Solo contains several types of protection:

• Zero-day and unknown malware defense – assumes all high target applications contain zero-day malware and guards them to prevent any zero-day exploit.
  • File-less types of malware which use built-in Windows tools are blocked by AppGuard Solo.

 

I understand.
I think that adding some software to WD anti-exploit list is a simple and necessary practice.
For example, it's much easier to find websites that malfunction with Trace in chrome-based browsers.
Many privacy extensions betray their promises in chrome-based browsers.

Best regards.

 

Tweaked Security Setup:

Hard_Configurator - Recommend Settings, Advanced SRP Logging On | ConfigDefender - Protection: High
TinyWall - Blocklists, Custom FW Rules and Pass Protected Settings
BitLocker - XTA-AES Encryption (OS and Data HDDs) | UAC - Max
MBAM Premium - Always Register in WSC Disabled | HitmanPro - Enabled Scan with HitmanPro
Edge - UBlock Origin, LastPass & ExpressVPN | Macrium Reflect - Image Guardian Enabled

 

You are very ready for a nuclear attack.good job buddy

 

Hahaha yea right. This setup is working well. MBAM is lighter than I remember. Last time I tried it (about 3-4 months ago), it slowed down my system considerably but now I barely noticed it was installed

 

Yeah people said that this new version 4.1 is lighter and faster

 

Yea but I used version 4 when it came out and for a few months after, it wasn't lighter on my pc.