What's New

• The home page has been significantly improved. The new Online Microsoft Defender Status section retrieves the data from online Microsoft Server when there is Internet connectivity, so everything you see is up to date information.

• Updated dependencies to the latest versions.

• Created a Windows Service that is responsible for performing Intune configurations detection during verification jobs so that even when you applied the security measures via Intune, they will be detected and verifiable by the app. The service is very compact (2MBs only), highly optimized and runs only when needed. It does not consume any resources when idle. The service is designed to automatically shut itself down when idle for 120 seconds. It can only be used by elevated Administrators and SYSTEM account. It is automatically installed when the Harden System Security app is installed and removed when the Harden System Security app is uninstalled, not leaving any leftovers on the system. It has 0 dependency other than the .NET SDK itself and its executable is inside the app's package.

  • In this update, only 1 security measure in the Windows Update category uses this feature. In the next update, many more Intune policy detections will be added for other security measures.

  • The service is designed to write verbose logs in the Windows Event log if you add a System environment variable to your OS named QUANTUMRELAYHSS_DEBUG with a value of 1 or true.

  • The service name is QuantumRelayHSS.

• Improved the total items design in the Certificate Checking page to match the rest of the app's design.

• Added extra removal strategy for tattooed policy EnableSvchostMitigationPolicy in the Miscellaneous Category.

• Added extra removal strategy for tattooed policy LongPathsEnabled in the Miscellaneous Category.

• Added TLS Sub-Category for Battle.net game client to the Protect page.

• Added Miscellaneous Sub-Category for reduced telemetry in the OS to the Protect page.

• Added a new policy to the BitLocker category: Allow network connectivity during connected-modern-standby (only when plugged in). Keeps the Operation System and Microsoft Defender up to date if the device is Modern Standby capable and is plugged in (meaning it's not on battery).

• Updated Wiki to ensure it has up to date information regarding the changes in this update.

• Improved overall code quality, maintainability and performance.

PRs

• #873
• #868
• #870

How To Download