5 ms·

If you're not willing to pay, I seriously recommend the built in Windows Defender (assuming you are using win10/11). It's as good or better than every free alte

If you're not willing to pay, I seriously recommend the built in Windows Defender (assuming you are using win10/11). It's as good or better than every free alternative I've tried, and it comes with the OS - all you need to do to use it is nothing - just _don't_ install another AV.

technion 5y ago
This is my standard time to paste it: Most of the enterprise configuration options in Defender can be put in place on a standalone desktop by opening gpedit.msc. You can configure exclusion paths for node_modules. You can configure sensitivity ("cloud protection level"), you can configure "Block at first site", you can configure "Potentially unwanted software" detection. Which you may choose to disable, but is absolutely brilliant for family members downloading "questionable" software. The Attack Surface Reduction rules can be put in place here even for people who disable realtime scans or use alternate AV products and provide significant, clear security benefits. The "block access to lsass.exe" option breaks mimikatz, procdump et al and is absolutely underrated for its capabilities. And free.
- unsignedint 5y ago
  If you use Pro, that is... gpedit.msc is not available on Home editions...just to note.
- tentacleuno 5y ago
  > You can configure exclusion paths for node_modules. With all the viruses going 'round in node_modules these days, that might not be such a good idea.
- sharps1 5y ago
  You can use ConfigureDefender to set the windows defender settings - https://github.com/AndyFul/ConfigureDefender https://github.com/AndyFul/ConfigureDefender Note: you can scroll ConfigureDefender down to get to the exclusions interface ;O)
- speedgoose 5y ago
  Personally, node_modules may be the last thing that I exclude. If it's too slow, consider using WSL2 for your NodeJS development.
poopooracoocoo 5y ago
Isn't Windows Defender one of the worst performing AVs?
- commoner 5y ago
  Microsoft/Windows Defender used to perform poorly on tests, but not anymore. AV-Comparatives awarded Microsoft Defender its highest Advanced+ rating in its most recent malware protection and real-world protection tests: https://www.av-comparatives.org/tests/malware-protection-test-september-2021/ https://www.av-comparatives.org/tests/malware-protection-tes... https://www.av-comparatives.org/tests/real-world-protection-test-july-october-2021/ https://www.av-comparatives.org/tests/real-world-protection-...
  - poopooracoocoo 5y ago
    When I wrote that comment I had performance in mind.
  - lambda_tango 5y ago
    In terms of protection, sure, but for actual system performance, Defender is still hot garbage: https://www.av-comparatives.org/tests/performance-test-october-2021/ https://www.av-comparatives.org/tests/performance-test-octob...

technion 5y ago

This is my standard time to paste it: Most of the enterprise configuration options in Defender can be put in place on a standalone desktop by opening gpedit.msc. You can configure exclusion paths for node_modules. You can configure sensitivity ("cloud protection level"), you can configure "Block at first site", you can configure "Potentially unwanted software" detection. Which you may choose to disable, but is absolutely brilliant for family members downloading "questionable" software. The Attack Surface Reduction rules can be put in place here even for people who disable realtime scans or use alternate AV products and provide significant, clear security benefits. The "block access to lsass.exe" option breaks mimikatz, procdump et al and is absolutely underrated for its capabilities. And free.

unsignedint 5y ago
If you use Pro, that is... gpedit.msc is not available on Home editions...just to note.
tentacleuno 5y ago
> You can configure exclusion paths for node_modules. With all the viruses going 'round in node_modules these days, that might not be such a good idea.
sharps1 5y ago
You can use ConfigureDefender to set the windows defender settings - https://github.com/AndyFul/ConfigureDefender https://github.com/AndyFul/ConfigureDefender Note: you can scroll ConfigureDefender down to get to the exclusions interface ;O)
speedgoose 5y ago
Personally, node_modules may be the last thing that I exclude. If it's too slow, consider using WSL2 for your NodeJS development.

poopooracoocoo 5y ago

Isn't Windows Defender one of the worst performing AVs?

commoner 5y ago
Microsoft/Windows Defender used to perform poorly on tests, but not anymore. AV-Comparatives awarded Microsoft Defender its highest Advanced+ rating in its most recent malware protection and real-world protection tests: https://www.av-comparatives.org/tests/malware-protection-test-september-2021/ https://www.av-comparatives.org/tests/malware-protection-tes... https://www.av-comparatives.org/tests/real-world-protection-test-july-october-2021/ https://www.av-comparatives.org/tests/real-world-protection-...
- poopooracoocoo 5y ago
  When I wrote that comment I had performance in mind.
- lambda_tango 5y ago
  In terms of protection, sure, but for actual system performance, Defender is still hot garbage: https://www.av-comparatives.org/tests/performance-test-october-2021/ https://www.av-comparatives.org/tests/performance-test-octob...