Security
User risk
Disabling security features is at your own risk, and you should only disable any security features if:
- You know what it does
- You know how to keep yourself safe without it
Atlas is not responsible for any damages caused by disabling security features against our recommendations.
Tip
If you deleted the folder, check out our guide to restore the Atlas folder..
In this section, we will list all of the 'Security' options in the Atlas folder, how to change them and their defaults.
All of the configuration files listed here are located in the 3. Configuration/5. Security
folder, which is inside of the Atlas folder on the Desktop.
Mitigations
Mitigations refer to software or hardware techniques implemented to address security vulnerabilities or weaknesses in the CPU of a computer. These mitigations help prevent software (e.g. vulnerable games) from being exploited to remotely execute code on system.
On Atlas, we have scripts and a prompt to enable or disable mitigations within Windows, as some older CPUs have their performance significantly worsened from mitigations. However, it is largely only beneficial on older CPUs, and some newer CPUs (like Zen 4 CPUs) can be negatively impacted if you disable mitigations, due to newer CPUs being designed for these mitigations.
There is also Fault Tolerant Heap that is disabled on Atlas by default, which applies non-CPU mitigations to processes that are repeatedly crashing, at the cost of significantly reduced performance. If you are having consistent application crashes, try enabling FTH.
If you have disabled mitigations and face issues with anticheat software, run the Set Windows Default Mitigations.cmd
script in the Mitigations
folder. Alternatively, if you want the maximum security, you can use Enable All Mitigations.cmd
, but that forces all mitigations to be enabled (unlike the Windows default), which can reduce performance significantly and may potentially reduce compatibility.
Defender
For most Windows users, Defender is a key component of Windows that protects against many threats from the internet, like ransomware and spyware. However, some users may want to take the risk of using no protection for improved privacy and performance/responsiveness, especially on older hardware, i.e. hard drives. However, disabling Defender puts you at a much higher risk of infection that you are responsible for, and it's not recommended by Atlas.
Please note that if you want to use another trustworthy antivirus program, disabling Defender isn't needed.
As Atlas believes in user freedom, we have given the option to fully toggle Defender at a component level. You can toggle Defender by using the script in the Defender
folder and running Toggle Defender.cmd
for disabling or enabling Defender. The folder also contains tweaks that you can run related to Defender or Windows Security.
Core Isolation
Core isolation is a security feature of Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core processes in a virtualized environment.
Core isolation is mostly meant to protect against vulnerabilities being exploited in important core processes within Windows, and although it does so effectively, this comes at a major cost of performance, especially on older CPUs. We recommend disabling Core isolation as the performance hit generally outweighs the security benefits for most users.
For Windows 11 users, Core isolation features are typically enabled by default, as long as your CPU supports Windows 11.
In the Core Isolation (VBS)
folder, we provide the Current Configuration.ps1
script to check which Core isolation features are avaliable, enabled and configured, along with other shortcuts to Core isolation features. Additionally, there is a prompt in AME Wizard for disabling Core isolation features.
Please note that not all features may not be avaliable, due to avaliable hardware security features or your Windows edition and version. Windows 11 should generally have more Core isolation features.
- Memory integrity
- Also known as HVCI or 'Hypervisor-protected Code Integrity'
- Like a security guard between the core components of Windows
- Credential Guard
- Protects
lsass.exe
by preventing attackers from stealing/dumping credentials from it lsass.exe
contains lots of authentication tokens used by Windows
- Protects
- Microsoft Vulnerable Driver Blocklist
- A blocklist to block drivers with known security vulnerablities, as drivers have unrestricted access to a system
- Firmware protection
- Protects against a compromised a UEFI/BIOS
- Memory access protection
- Also known as 'Kernel DMA protection'
- Prevents attacks that can occur when a malicious PCI device is plugged in
- A malicious PCI device could be plugged in through a Thunderbolt port, as an example
- Kernel-mode Hardware-enforced Stack Protection
- Protects against Return-Oriented Programming (ROP) attacks
UAC
UAC (User Account Control) is a feature in Windows that helps control what changes software can make to your computer. This helps protect against applications malfunctioning and doing harmful changes to your computer.
Please note that most well-made malware will be able to bypass UAC easily, and that the only true way to protect yourself against UAC bypasses is to turn UAC up to the maximum level.
When UAC is disabled, everything will be run as Administrator. On the current version of Atlas, it is enabled it by default. To disable it, run the Disable UAC.cmd
file in the User Account Control (UAC)
.
Firewall
Firewall is a built-in feature on Windows which is used to block unwanted connections. On Atlas we have kept this enabled by default to enhance system security. To disable it you can run the Disable Windows Firewall.cmd
file in the Firewall
folder.