#cybersec

#askNostr

#Nostr

Today a friend asked me what could she do to find out if someone was accessing her laptop on remote without her noticing.

I asked her, Do you require remote connection at all? Do you ever use it?

She answered, not needed, never use it.

So I recommended her to configure her Windows firewall to block incoming RDP connections by default by creating a new inbound rule and blocking the TCP port 3389, no white listed IPs neither, all blocked by default.

She did it, but she still feels uneasy about hackers getting into her PC on remote... A recent really bad experience I suppose...

She asked me if there was not a tool that will monitor network activity and let her know if there was an attempted intrusion, I told her that is what the firewall is for and it does a good job, problem is that people click and download all kind of s#%& without verifying or caring much, getting the software that hack them right in their laptops themselves. Oh, and I suggested she moved to Linux (she didn't like that)

She was saying, I want a notification pop when an intrusion attempt is detected...

For a noob like her, What other recommendations or simple tools (FOSS better) do you guys think she could use to feel safer? You guys think my recommendation is enough?