Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-12-22 06:41:47 -05:00
Code

Core Isolation

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-12-30 17:19:40 -07:00
parent 9a87f9219b
commit 08ec7ab09f
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
Windows Settings/Windows Security.md
View File

@ -4,7 +4,7 @@
### Cloud-delivered protection
This sends hashes and file paths to Microsoft. Whether to keep this on or not depends on the threat model.
This sends hashes and file paths to Microsoft. Whether to keep this on or not depends on the threat model. I recommend keeping it on on a domain controller and gaming machines.
One caveat with this is that if it takes the cloud too long to scan, the computer will just run the executable. Might wanna increase the timeout later to make it less theatric:
@ -65,6 +65,11 @@ Turn Force randomization for images (Mandatory ALSR) to "On by default".
# Device Security
## Core Isolation
- Memory integrity -> Turn on
- Firmware protection -> Turn on
## Security Processor & Secure Boot
If theres aren't on, check the firmware settings. On Parallels, both should pass by default.