Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-22 16:11:45 -05:00
Code

Update

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-11-05 04:52:45 -07:00
parent ea0e2db901
commit 9fe5cfb684
No known key found for this signature in database
GPG Key ID: D30DEC268D3FEB17
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Windows Security.md
View File

@ -56,3 +56,15 @@ Probably same as SmartScreen for Microsoft Edge. Might not be as egregious thoug
### Exploit protection ### Exploit protection
Turn Force randomization for images (Mandatory ALSR) to "On by default". Turn Force randomization for images (Mandatory ALSR) to "On by default".
# Device Security
## Security Processor & Secure Boot
If theres aren't on, check the firmware settings. On Parallels, both should pass by default.
## Data encryption
Poor man's Bitlocker. Unless you are using Home edition, turn this off and use Bitlocker proper.
If you sign in with a Microsoft account, "Data Encryption" will submit the key protector to Microsoft (which means that Microsoft can decrypt your device should they get physical access to it). Not sure what happens when you do not login with a Microsoft account, but it is worse than a proper Bitlocker setup anyways (no TPM + PIN/USB drive etc), so just disable it.