4 ms·
This is my standard time to paste it: Most of the enterprise configuration options in Defender can be put in place on a standalone desktop by opening gpedit.msc
by technion 5y ago
This is my standard time to paste it: Most of the enterprise configuration options in Defender can be put in place on a standalone desktop by opening gpedit.msc. You can configure exclusion paths for node_modules. You can configure sensitivity ("cloud protection level"), you can configure "Block at first site", you can configure "Potentially unwanted software" detection. Which you may choose to disable, but is absolutely brilliant for family members downloading "questionable" software.
The Attack Surface Reduction rules can be put in place here even for people who disable realtime scans or use alternate AV products and provide significant, clear security benefits. The "block access to lsass.exe" option breaks mimikatz, procdump et al and is absolutely underrated for its capabilities. And free.
- unsignedint 5y agoIf you use Pro, that is... gpedit.msc is not available on Home editions...just to note.
- tentacleuno 5y ago> You can configure exclusion paths for node_modules. With all the viruses going 'round in node_modules these days, that might not be such a good idea.
- sharps1 5y agoYou can use ConfigureDefender to set the windows defender settings - https://github.com/AndyFul/ConfigureDefender https://github.com/AndyFul/ConfigureDefender Note: you can scroll ConfigureDefender down to get to the exclusions interface ;O)
- speedgoose 5y agoPersonally, node_modules may be the last thing that I exclude. If it's too slow, consider using WSL2 for your NodeJS development.