00:00Welcome back to Gamescan TechWary. Today, we're removing beyond gaming performance to tackle something equally critical.
00:07Locking down your digital fortress.
00:09In a world of evolving cyber threats, a default Windows 11 installation just isn't enough.
00:15We're going to dive deep into system hardening, transforming your PC from a standard target into a fortified stronghold.
00:22This isn't about fancy antivirus software. It's about leveraging the powerful, built-in tools that most users overlook.
00:30Let's get started.
00:32First up is one of the most powerful defenses against advanced malware.
00:37Virtualization-based security.
00:38Go to your settings, search for core isolation, and click on the details.
00:43The key feature here is memory integrity.
00:46By enabling this, you're using hardware virtualization to create a secure, isolated region of memory.
00:52This makes it incredibly difficult for malicious code, especially root, to inject themselves into high-security processes and take over
01:00your system.
01:01It is a fundamental layer of protection that isolates critical kernel processes from the rest of the operating system.
01:07If it's off, turn it on and restart your PC to apply the changes.
01:11This single step significantly raises the bar for attackers.
01:15Next, let's neutralize the threat of ransomware.
01:18Ransomware encrypts your personal files and holds them hostage.
01:22Windows has a built-in countermeasure called Controlled Folder Access.
01:26Search for ransomware protection in your Windows security settings.
01:29When you enable Controlled Folder Access, you essentially create a whitelist of applications that are allowed to make changes to
01:36files in your most important folders, like documents, pictures, and your desktop.
01:41Any unauthorized application that tries to modify these files will be blocked instantly, and you'll get a notification.
01:49You can manually add trusted applications to the allowed list if needed, giving you granular control while keeping your precious
01:55data safe from encryption attacks.
01:58This is non-negotiable for data integrity.
02:00Now, let's gain full control over our network traffic with the Windows Defender Firewall with Advanced Security.
02:07Don't just rely on the default settings. Search for Windows Firewall and open the Advanced Tool.
02:13Here, you can create custom inbound and outbound rules for specific programs.
02:20For example, you can create an outbound rule to block a specific application from connecting to the Internet entirely.
02:27You'd select Program, Browse, to the application's executable file.
02:32Choose to block the connection and apply it to all network profiles.
02:37Domain, Private, and Public.
02:39Naming your rule clearly, like Block Apex Internet Access, helps you manage your security policy effectively.
02:46This level of control is crucial for preventing data exfiltration and stopping malware from communicating with its command and control
02:55servers.
02:56So, let's recap.
02:58We've enabled memory integrity to protect the core of our operating system.
03:02Activated controlled folder access to shield our files from ransomware.
03:06And configured advanced firewall rules to manage network traffic with precision.
03:10These three steps are foundational to a robust Windows 11 hardening strategy.
03:15They utilize built-in, enterprise-grade security features to provide a multi-layered defense against a wide array of modern
03:23threats.
03:23Taking the time to implement these configurations is one of the smartest investments you can make in your digital security.
03:29Stay vigilant.
03:31Stay secure.
03:32Thanks for watching Games Can Tech.
03:33And don't forget to subscribe for more in-depth tech guides.
Comments