• Microsoft Windows 11
• 22000

• A lot of this is TODO

• Enabling Secure Boot prevents non-WHQL drivers from working ¹⁾

• https://www.microsoft.com/en-us/software-download/windows11

• See slipstream-updates

• https://docs.microsoft.com/en-us/windows/deployment/update/servicing-stack-updates#when-are-they-released
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001
• SSU is to be installed before the CU

• 22000

YYYY-MM Update for Windows 11 for x64-based Systems (KB#######)

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

• https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in
• https://www.grc.com/inspectre.htm

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverride" /t "REG_DWORD" /d "3" /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverrideMask" /t "REG_DWORD" /d "3" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

powercfg /H off

fsutil behavior set disablelastaccess 1

reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f

• General
• Windows Store Apps
• Microsoft EDGE

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

• TODO: Fix for 11

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f

• https://scripttiger.github.io/hosts-packages/
• Unified hosts + fakenews + gambling (Compressed)

• Powershell Script *.ps1

[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls"
Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts"
ipconfig /flushdns

• Change D:\ to install media drive if necessary

Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

• Powershell Script *.ps1

Get-AppxPackage -allusers | Remove-AppxPackage

taskkill /IM "OneDrive.exe" /F

%windir%\SysWOW64\OneDriveSetup.exe /uninstall

rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q

reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

• Last updated: 2020/10/02

:: .NET Framework 4
"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" update /force /queue
"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" executequeueditems
"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" executequeueditems

:: System File Check, Cleanup, and Repair
"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%windir%\system32\sfc.exe" /scannow

:: Classic Disk Cleanup
"%windir%\system32\cleanmgr.exe" /sageset:65535
"%windir%\system32\cleanmgr.exe" /sagerun:65535

:: Defrag/Trim
"%windir%\system32\dfrgui.exe"

• https://www.cpuid.com/softwares/cpu-z.html

• https://www.techpowerup.com/download/techpowerup-gpu-z/

• https://www.mersenne.org/download/

• https://www.hwinfo.com/download/

• https://github.com/kruzer/poclmembench

• https://github.com/lostindark/DriverStoreExplorer

• https://www.amd.com/en/support/kb/faq/gpu-601

• https://www.amd.com/en/technologies/ryzen-master

• https://crystalmark.info/en/software/crystaldiskinfo/

• https://msikombustor.com/

• https://simtk.org/projects/memtest/
• https://github.com/ihaque/memtestCL
• https://github.com/ihaque/memtestCL/raw/master/binaries/memtestCL.exe

• https://alax.info/blog/software

• https://resplendence.com/latencymon

• https://www.ocbase.com/

• https://www.grc.com/inspectre.htm

• https://geeks3d.com/furmark/downloads/

• https://downloadcenter.intel.com/download/19792
• Intel Processor Diagnostic Tool

• https://github.com/mcmilk/7-Zip-zstd/
• Anything compressed with this needs to be extracted with this

• https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip

• https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip

SETX /M path "%path%;C:\Program Files\platform-tools"

• https://github.com/aria2/aria2/releases

SETX /M path "%path%;C:\Program Files\aria2c"

• https://www.bleachbit.org/download/windows

• https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109

• https://github.com/doitsujin/dxvk/releases
• https://github.com/Sporif/dxvk-async/releases

• See dll_overrides

• https://filezilla-project.org/download.php?show_all=1

• exe

rd "%appdata%\Mozilla" /s /q

md "%appdata%\Mozilla\Firefox\Profiles\espionage724"

notepad "%appdata%\Mozilla\Firefox\profiles.ini"

[General]
StartWithLastProfile=1

[Profile0]
Name=default
IsRelative=1
Path=Profiles/espionage724
Default=1

• Last updated: 2020/11/05

notepad "%appdata%\Mozilla\Firefox\Profiles\espionage724\user.js"

/***********
 * General *
 ***********/

user_pref("extensions.screenshots.disabled", true);
user_pref("reader.parse-on-load.enabled", false);

user_pref("accessibility.force_disabled", 1);
user_pref("mousewheel.min_line_scroll_amount", 40);

/***********
 * Privacy *
 ***********/

user_pref("geo.enabled", false);
user_pref("privacy.donottrackheader.enabled", true);

user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);
user_pref("browser.safebrowsing.downloads.enabled", false);

user_pref("network.security.esni.enabled", true);

user_pref("privacy.trackingprotection.enabled", true);
user_pref("toolkit.telemetry.enabled", false);

/*******
 * U2F *
 *******/

user_pref("security.webauth.u2f", true);

/*******
 * END *
 *******/

• Firefox must be started for the first time with the -p flag for the profile above to be used

"%ProgramFiles%\Mozilla Firefox\firefox.exe" -p default

rd "%ProgramFiles%\Mozilla Firefox\browser\features" /s /q

• Decentraleyes
• Privacy Possum
• Cookie AutoDelete
• uBlock Origin

• https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions
• https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions
• https://addons.mozilla.org/en-US/firefox/addon/cookie-autodelete/versions
• https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions

• Clean-up everything
• Disable notifications

• [x] Prevent WebRTC from leaking local IP addresses

• [ ] Ads → EasyList ²⁾
• [ ] Privacy → EasyPrivacy ³⁾

• Multipurpose → [x] Dan Pollock's hosts file
• Multipurpose → [x] hpHost's Ad and tracking servers
• Multipurpose → [x] MVPS HOSTS

• Custom → [x] Import

• Last updated: 2018/11/23
• Last verified: 2020/11/05

https://www.fanboy.co.nz/fanboy-problematic-sites.txt
https://www.fanboy.co.nz/r/fanboy-ultimate.txt
https://www.fanboy.co.nz/fanboy-antifacebook.txt
https://www.fanboy.co.nz/fanboy-antifonts.txt
https://www.fanboy.co.nz/fanboy-cookiemonster.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt

• https://www.youtube.com/html5
• https://ipx.ac
• https://decentraleyes.org/test/
• https://panopticlick.eff.org/
• https://browserleaks.com/
• https://librespeed.org/
• https://www.cloudflare.com/ssl/encrypted-sni/
• https://1.1.1.1/help

• https://www.gimp.org/downloads

• https://www.google.com/chrome/?standalone=1&platform=win64

• https://www.apple.com/itunes/download/win64

• https://keepassxc.org/download#windows

• https://prerelease.keybase.io/keybase_setup_amd64.msi

• https://github.com/abbodi1406/KMS_VL_ALL_AIO/releases
• https://forums.mydigitallife.net/threads/kms_vl_all-smart-activation-script.79535/

• https://www.libreoffice.org/download/download/

• https://sourceforge.net/projects/mpv-player-windows/files/64bit/
• https://mpv.io/

• https://notepad-plus-plus.org/download

• https://obsproject.com/download
• https://github.com/wtsnz/obs-ios-camera-source/releases

• https://www.qbittorrent.org/download.php

• https://rufus.ie/

• https://www.thunderbird.net/en-US/thunderbird/all/#E

• https://github.com/abbodi1406/vcredist/releases
• https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes.76588/

• https://vulkan.lunarg.com/sdk/home#windows
• https://vulkan.lunarg.com/sdk/home#sdk/downloadConfirm/latest/windows/vulkan-runtime.exe

• If kill switch is enabled, all local network resources can't be accessed

• https://www.wireguard.com/install/

• https://vpn.ac/knowledgebase/130/WireGuard-on-Windows.html
• https://vpn.ac/wgmanager

• https://www.blizzard.com/en-us/download?product=bnetdesk
• http://dist.blizzard.com/downloads/bna-installers/322d5bb9ae0318de3d4cde7641c96425/retail.1/Battle.net-Setup-enUS.exe

• https://www.oculus.com/rift/setup/?locale=en_US

• Use HEVC/H.265 instead of AVC/H.264 for Link
• As of 2021/06/30, HEVC doesn't work for a RX 580, but it falls back to AVC; presumably this will be fixed at some point

reg add "HKEY_CURRENT_USER\SOFTWARE\Oculus\RemoteHeadset" /v "HEVC" /t REG_DWORD /d "1" /f

• This lowers average Motion-to-photon latency by about 4ms for a Rift CV1 (19ms to 15ms)
• Oculus Forums Thread

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Oculus" /v "UseSpud" /t REG_DWORD /d "0" /f

%localappdata%\Oculus

• https://sidequestvr.com/setup-howto

• ADB drivers are automatically installed by Oculus
• For general .apk installs and adb shell commands, use SideQuest instead
• For sideloading firmware updates, SideQuest cannot be used, and thus will need the platform-tools package below

• Oculus ADB Drivers
• Android SDK Platform-Tools

• Let Oculus download its 5GB+ installer
• While it is installing, backup the C:\OculusSetup-DownloadCache folder
• The backup must be done after the download, and while Oculus is installing
• If restoring, transfer 5GB+ to C:\OculusSetup-DownloadCache and start the Oculus installer
• If an updated Oculus client is available, it will download instead of restoring

• Go to the Oculus\Support folder
• If there's 15 folders, backup everything except oculus-dreamdeck-nux, oculus-touch-tutorial, and oculus-worlds
• 12 folders should be included in the backup and it should be around 605MB if archived
• This has been true with versions pre-V12, V18-V30
• For restoring, stop the Oculus service through command or Debug Tool, delete the existing 12 folders, restore the 12 folders from backup, and start the Oculus service

%OculusBase%\Support

• This sets the update channel to something unknown, so the Oculus client can't compare its version to check for updates
• To revert this, it may be enough to toggle the Public Test Channel option from Oculus

• LIVE Stable
• PublicTest = Public Test Channel/PTC
• NOUPD8 = Some nonsense value

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Oculus VR, LLC\Oculus\Config" /v "CoreChannel" /t "REG_SZ" /d "NOUPD8" /f

• Answers HQ

• https://download.dm.origin.com/origin/live/OriginSetup.exe

• https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe
• See Command-line flags

• See drivers for more URLs

• ASUS PRIME X470-PRO Notes
• BIOS Updates

• Logitech G29 Driving Force Racing Wheel
• Logitech G HUB

• Don't use Logitech Gaming Software as it breaks force-feedback in City Car Driving and has no known benefit otherwise

• ASUS ROG Forums

• X470
• AMD Drivers & Support

• RX 580
• AMD Drivers & Support

• ASM1142
• Win-Raid Forums
• Station-Drivers

• Do not install any special driver for the AMD USB controllers/hubs, ever