Installs (OS) and Software

General guidance for new installs, new systems, and managing software

• On all Operating Systems, especially Linux distributions and Windows, start with a clean fresh install of the OS.

• In doing so, also ensure (if you have the knowledge, wipe any partitions prior to reformatting (installing new clean OS)

  • For Windows, use custom set up and decline the options. Do not use express. Read what you are choosing.

  • For Windows, a debloater tool can be used (Sycnex).

    • This will run a powershell script to remove all of the “bloatware”, search index, unecessary scheduled tasks, remove cortana

  • For Linux, always choose to install minimum requirements

• Keep your installed software clean. Routinely manage your installed software and remove anything no longer being used.

  • Software, especially outdated or no longer support software, can introduce vulnerabilities and attack vectors for bad actors.

• Backup your data and create save points for events where you need to restore.

• Updates: Keep your systems up to date.

  • For the average daily user, simply keep your operating system and software updated. For the more advanced user, you can manage your updates manually.

  • Often zero-day attacks are introduce in updates. Therefor, security updates and patches are released to resolve these.

    • A zero-day attack is an attack using a vulnerability introduced, that has not been patched. Bad actors are always looking for these new vulnerabilities to exploit.