This repo contains ultimate security configurations against hacking such as memory space access, malware, credential theft - including some denial of service attacks + rootkit deployments: milsec for a lot of Windows programs. Following apps are protected (click categories to show list):
Web Browsers
- Google Chrome
- Mozilla Firefox
- Internet Explorer
- Librewolf
- Opera
- Safari
- Thorium
- Edge
- DuckDuckGo
- Brave
Media Tools
- Audacity
- butt audio streaming
- Virtual DJ
- Traktor
- Photoshop
- Groove Music
- Winamp
- foobar2000
- iTunes
- Windows Media Player
- NDIRecord
- StreamDeck
- Yamaha Steinberg USB
- vMix64
- BlackMagic Video
- VLC Media Player
Communication Apps
- Skype
- Lync
- Pidgin
- Telegram
- MS Outlook
- Thunderbird
- Windows Live Mail
- Google Talk
- Slack
- Wire
- Armcord (a Discord client)
- Discord
Gaming
- Steam
- Ubisoft
- BlueStacks X
- EA - Electronic Arts
- GOG Galaxy (edit version number in .XML file accordingly)
- EasyAntiCheat
- The Sims 4
- Cyberpunk 2077
- Firestorm (for Second Life)
- Radegast
Networking
- dnscrypt-proxy
- Tor
- Torifier
- WARP 1.1.1.1
- OpenVPN
- WireGuard
- VPN Unlimited
- Comodo Internet Security
- YogaDNS
Common Software
- Notepad++
- Obsidian
- OneNote
- Acrobat Reader PDF
- Sumatra PDF
- Foxit PDF Reader
- Java
- MS Access
- MS Excel
- MS PowerPoint
- MS Word
- MS Wordpad
- MS Notepad
- PowerShell
- PowerShell ISE
- Visio
- WinZip
- WinRAR
- 7Z
- ...
Microsoft Services
- Literally all (!) basic Windows programs from boot. Beyond recommendations (took a few bluescreens >.<)
- OneDrive
- File Explorer
- Smartscreen
- Windows Settings
- Task Manager
- Windows Store
- Command terminal
- search index
- SSH
- svchost
- smss
- csrss
- lpcapsvc
- conhost
- dashost
- OOBEbroker
- WMI
- wininit
- winlogon
- WerFault
- lsalso & lsass
- and many more (everything on Windows 10 & 11)
Other Executables
- Adobe (services)
- AMD (GPU driver)
- Citrix Workspace App
- Crash_handler
- DuckyRGB
- Edge Webview2 (works for Citrix Workspace, DuckDuckGo, Edge...)
- Everything
- HP (drivers)
- Intel (drivers)
- KeePassXC & proxy
- Open SSL
- NVIDIA
- Qbittorrent
- Qt Web Engine
- Real Converter
- RealPlay
- Realtek Audio
- SwitchDefaultDeny(x64)
- SyncThing
- Thunderbolt
- ...
Check separate settings when specific features don't work as they are fully tested & all programs will start.
Windows Settings > Security & Privacy > Windows Security > App & browser control > Exploit protection settings > Program settings
XploitProtection.xml + extra security settings below are focused on Windows Home & Pro consumers, gamers & small businesses (including privacy geeks) where agility is everything. Help update XploitProtection.xml and keep this repo growing with new entries. By using PoE (process of elimination) while applying WEPS and updating the .xml file here, we keep the most complete list online.
Run XPROT.exe to change WEPS quickly. Update every so often (this will not remove any exiting settings) & reboot to activate, also after manually importing with this command:
Set-ProcessMitigation -PolicyFilePath "$HOME\Downloads\XploitProtection.xml"
Some installations require temporarily removing protection: reboot & install the software, run again or import your own local XML. After restart, these policies block intrusions like botnets, cache exploits and more!
The standalone .EXE (or use PowerShell ISE to run this script) brings dramatic improvements to the interface that Windows offers today - WEPS Manager excels in speed for bulk actions & repetitive implementations, running tighter security with no trouble: remove & import settings again during any new installation. Be up to date in a few seconds.
- Use DNS (f.e. 9.9.9.9, 1.1.1.1,...) with activated encryption via Windows network settings or a third party solution
- https://github.com/AndyFul/ConfigureDefender (hardening of Windows)
- windows_hardening.cmd (includes mimikatz exploit protection & more security!)
- https://github.com/Sycnex/Windows10Debloater (debloat Windows 10 & 11)
- https://www.thewindowsclub.com/ultimate-windows-tweaker-5-for-windows-11
- https://github.com/jdgregson/Exploit-Protection-Settings as to support Microsoft Office
- Added https://github.com/Strana-Mechty/ExploitProtection-Templates including Adobe, Telegram & more
- Calibrated with original https://github.com/microsoft/ExploitProtectionConfiguration
⭐ Star & help others find better protection.
#WindowsHome #WindowsPro #Windows10 #Windows11 #Microsoft #WindowsExploitProtectionSettings #Hardening #Cybersecurity #ExploitProtection #Defender #WindowsDefender #Gaming #Mimikatz #Defense #Botnet #Antibotnet #Antivirus #Glitch #Virus #Infection #Privacy #SVC #Vulnerabilities #Cyberdefense #Protection #Gaming #Stackpivot #CFG #SEHOP #ASLR #Heapcorruption #Safeboot #VPN #OpenVPN #WireGuard #Tor #Proxy #Redhat #Whitehat #Anonymous #DEFCON #Opensource #Interface #Tool #Qt #Quantum #Spacetime #ProtectionSettings #Manager #Security #Software #GUI #Productivity #CallerCheck #HandleUsage #Fonts #Images #dll #services #taskhost #svchost #PowerShell #TLS
© FrenzyPenguin Media
