Windows 10 configuration and application recommendations for increased security and privacy.

windows.yml

---
operatingsystem: windows
applications:
  - antivirus (Microsoft Defender, ...)
  - bleachbit
  - firefox
    plugins:
      - https anywhere
      - ublock
      - privacy badger 
    search engine:
      - duckduckgo.com
    configuration (https://github.com/konstruktoid/hardening/blob/master/misc/mozilla-firefox-user.js):
      - History: Always use private browsing mode
      - Strict Enhanced Tracking Protection
      - Tracking Protection: Always
      - Do Not Track: Always
      - Block dangerous and deceptive content
      - network.trr 2
      - Enable HTTPS-Only Mode in all windows
  - sumo software update monitor
  - keepass2
  - sandboxie
  - keybase
  - veracrypt
  - securitywithoutborders/hardentools
notes: >
  keepass2 db stored in veracrypt,
  all browsers are started with sandboxie,
  keybase for file copy and communication
...