ConfigureDefender VS Edge-Enterprise

https://github.com/AndyFul/ConfigureDefender lets you dig into some settings, but not what I need.

Windows Defender + ConfigureDefender and set it to Maximum Protection Level = Defender on Steroids.

When using defender I recommend using this utiliy https://github.com/AndyFul/ConfigureDefender

You can prevent the LOLbin from contacting its C2 server by using an tool like FirewallHardening which you can download here, it allows you to add firewall block rules in Windows Firewall to prevent LOLbins from phoning home, not only .NET framework files but also things like Powershell and ConHost which are abused by the majority of malware.

What is the easiest way to use all the links via the search function again if you are not an sys-admin?In my case it is about Windows Pro/Home in the private area, i used https://github.com/AndyFul/ConfigureDefender for my Windows Defender. I have no idea which script to start here now. :(

ConfigureDefender

For keeping malware off your machine Windows Defender and some common sense should be perfectly fine, although I would recommend running ConfigureDefender and choosing whatever security level you find most appropriate for your use case. Also if you ever suspect you have malware that Defender didn't detect, just download the free version of malwarebytes, do a quick scan and uninstall it again; it's highly unlikely that something would make it past both of them.

Microsoft Defender configured by configure defender

Windows 11 built-in security is quite good, particularly when paired with the likes of ConfigureDefender or DefenderUI which allows you to tweak the built-in protection https://github.com/AndyFul/ConfigureDefender but there are third party options out there. Andy Ful also has system hardening tools that add an extra layer of protection but there have been some compatibility issues with windows new SmartApp Control feature https://github.com/AndyFul/Hard_Configurator/tree/master/Simple%20Windows%20Hardening .

It is an extension, not a WebView. Of course, it gathers your input, but a normal webview cannont have access to a page not within it's own. https://github.com/MicrosoftDocs/Edge-Enterprise/blob/public/edgeenterprise/microsoft-edge-sidebar.md

I thought a lot about the pros/cons. I read this as well Edge-Enterprise/microsoft-edge-security-password-manager-security.md at public · MicrosoftDocs/Edge-Enterprise · GitHub

See this.

What about downloading Edge's GPOs ? Surely they have some policies to enforce certain rules for communication . By default not available through Group Policy Editor and non present on Regedit https://github.com/MicrosoftDocs/Edge-Enterprise/blob/public/edgeenterprise/configure-microsoft-edge.md

On Windows there is a registry setting you can add described here: https://github.com/MicrosoftDocs/Edge-Enterprise/blob/public/edgeenterprise/microsoft-edge-policies.md#enablemediarouter