#########
Security
#########

Encrypt your harddrive
======================

* Open "Manage Bitlocker" app
* Turn on Bitlocker for your hard disk 


Activate Ransomware protection
==============================

* In Windows Defender -> Virus & threat protection -> Manage ransomware protection turn on "Controlled folder access"
* Add folders containing your important data if there are any beside documents, pictures, videos and music
* You can also allow other than preconfigured apps to access the protected directories


Install Application guard
==========================

* To use Edge in an isolated environment (VM) goto Windows Defender -> App & browser control and install Application Guard


Run kernel processes in a sandbox
==================================

* In Windows Defender _> Device security -> Core isolation details activate "Memory integrity"


Run other programs in a sandbox
================================

* Activate the feature "Windows Sandbox"
* After a reboot open Windows Sandbox App
* Copy and paste the program you want to run and start it


Activate ASLR for all programs
==============================

* To activate Adress Space Layout Randomization (ASLR) for all programs go to Windows Defender -> App & browser control -> Exploit protection settings and turn on "Force randomization for images"


Dont upload file for virus protection
=====================================

* In Windows Defender -> Virus settings turn off "Cloud delivered protection"


Turn off smart screen
======================

* If you dont want to upload unknown exe files to the cloud
* In Windows Defender -> App & browser control -> Reputation-based protection turn off "Check apps and files" and "SmartScreen for Microsoft Edge"