ConfigureDefender VS nextdns

https://github.com/AndyFul/ConfigureDefender lets you dig into some settings, but not what I need.

Windows Defender + ConfigureDefender and set it to Maximum Protection Level = Defender on Steroids.

When using defender I recommend using this utiliy https://github.com/AndyFul/ConfigureDefender

You can prevent the LOLbin from contacting its C2 server by using an tool like FirewallHardening which you can download here, it allows you to add firewall block rules in Windows Firewall to prevent LOLbins from phoning home, not only .NET framework files but also things like Powershell and ConHost which are abused by the majority of malware.

What is the easiest way to use all the links via the search function again if you are not an sys-admin?In my case it is about Windows Pro/Home in the private area, i used https://github.com/AndyFul/ConfigureDefender for my Windows Defender. I have no idea which script to start here now. :(

ConfigureDefender

For keeping malware off your machine Windows Defender and some common sense should be perfectly fine, although I would recommend running ConfigureDefender and choosing whatever security level you find most appropriate for your use case. Also if you ever suspect you have malware that Defender didn't detect, just download the free version of malwarebytes, do a quick scan and uninstall it again; it's highly unlikely that something would make it past both of them.

Microsoft Defender configured by configure defender

Windows 11 built-in security is quite good, particularly when paired with the likes of ConfigureDefender or DefenderUI which allows you to tweak the built-in protection https://github.com/AndyFul/ConfigureDefender but there are third party options out there. Andy Ful also has system hardening tools that add an extra layer of protection but there have been some compatibility issues with windows new SmartApp Control feature https://github.com/AndyFul/Hard_Configurator/tree/master/Simple%20Windows%20Hardening .

Block 45.76.93.104 and 2001:19f0:6c00:1b0e:5400:4ff:fecd:7828 at the firewall if possible.

Ensure that DNS-over-HTTP (DoH) is enabled where it can be.

Set upstream DNS servers that block malware, such as 1.1.1.2 or NextDNS

Delete "fritz.box" from the domain search list in DNS settings.

Educate your parents to be cautious about directly typing domain names or searching from the OmniBox.

https://nextdns.io/

https://blog.cloudflare.com/introducing-1-1-1-1-for-families...

I've tried hosted Pi-Hole and AdGuard Home. They are good as long as I'm around to fix stuffs. Then I tested something which can be global (home) and also for individual devices -- Control-D, NextDNS, and Adguard DNS. All of them works pretty well. If I really have to choose, then it would be in the order of NextDNS > Control-D > AdGuard DNS. Affiliated with none, and have decided to subscribe to all three to further test them for this year.

https://controld.com

https://nextdns.io

https://adguard-dns.io

Okay but NextDNS' own homepage says it "blocks ads and trackers on websites and in apps" - https://nextdns.io

I first used Safari on Windows around 2006. Put me off forever.

You just need Firefox and the extensions that mean ads are never seen.

That said, take a look at https://nextdns.io

just run snort and get nextdns.io account and use those DNS servers to control your DNS.