QasbaGuard
EN

Guide · version 5.5

From installation to your first rampart, in 10 minutes

Each step fits in a few lines. The screenshots show exactly what you will see.

Language of the tool. QasbaGuard is in French for now, on a Windows set to French in these screenshots. Key names and Windows menus are given in English, with the French term in brackets where it helps.

1Install

  1. Download the Installation version.
  2. Right-click the zip > Properties > tick Unblock > OK. This avoids Windows warnings on every file.
  3. Right-click > Extract All.
  4. Double-click INSTALLER.cmd, accept the User Account Control window, then type o.
  5. From then on, start QasbaGuard from the Desktop shortcut. You can delete the extracted folder.
Installation screen: code in Program Files, data in ProgramData, rights reserved to administrators, shortcut on the Desktop
Protected installation: only administrators can change the scripts and rollbacks.

Windows protected your PC? This is the SmartScreen window, normal for a free unsigned tool. Check the zip's SHA-256 hash (Get-FileHash in PowerShell) against the one on the Download section, then choose More info > Run anyway.

Portable version: same steps 1 to 3, then double-click START.cmd. The I key in the menu installs the protected version whenever you like.

Use the ↑ ↓ arrows then Enter, or press the key shown in brackets. The top banner shows your rights, the device and pending rollbacks.

QasbaGuard main menu
KeyWhat it does
1 2 4PC audits, read-only
3Deploy PC security (simulation or real)
5 6Phone audits, read-only
7Deploy phone security
8Look for spyware on the phone (androidqf + MVT from Amnesty International)
R H PRestore, report history, purge
LLanguage of the reports

3Audit

Always start with 1. Nothing is changed: you get a report in your browser, with a score, the flaws by severity and what to do.

Example of an audit report: compliance score, flaws, actions, control matrix
An audit report (here for the phone). ACTION lines must be done by hand.

4Deploy a level

  1. Key 3 > Simulation.
  2. Choose the level. If in doubt: 2 · Hardened.
  3. Read the simulation report: each line says what would change.
  4. Repeat with the real deployment (Déploiement réel), then restart the PC.
  5. Run audit 1 again to measure the progress.
Deployment submenu: simulation, real deployment, deployment with Sysmon
Level choice: Balanced, Hardened, Paranoid, Military
Choosing the level, with what each one changes.

BitLocker. If encryption is offered, the recovery key appears on screen: copy it away from the PC (paper, password vault) before confirming. Without it, a failure can make the disk unreadable.

5Roll back

Press R and choose the device: QasbaGuard offers rollbacks from newest to oldest, and refuses to skip a step. A Windows restore point is also created before each deployment.

Restore screen: list of devices with the number of available rollbacks

6The Android phone

  1. On the phone: Settings > About phone > Software information, tap Build number 7 times.
  2. Developer options > USB debugging: on. On Samsung, temporarily turn off Auto Blocker.
  3. On the PC: download SDK Platform-Tools for Windows from developer.android.com and copy the whole folder content into C:\ProgramData\QasbaGuard\Outils\platform-tools\.
  4. Connect the cable, accept “Allow USB debugging”, then run 5 and 7.
  5. At the end of the session, agree to turn off USB debugging.

Your mobile antivirus, password manager and accessibility tools, installed from an official store, are always preserved. For any other app able to read your notifications or control the screen, QasbaGuard asks you before removing anything.

7Your antivirus

QasbaGuard works with Defender and with third-party antivirus products, and never disables them. An antivirus may still block a tool that changes security settings by mistake. If so, add an exclusion (Exclusions or Exceptions section) for:

  • C:\Program Files\QasbaGuard and C:\ProgramData\QasbaGuard (installed version);
  • or the extracted folder (portable version).

If your antivirus has its own firewall, the report lists the rules to reproduce there.

8Uninstall

  1. Key R: restore whatever you want to undo.
  2. Delete C:\Program Files\QasbaGuard, C:\ProgramData\QasbaGuard and the QasbaGuard shortcuts on the Desktop and in the Start menu.

9Limits

No tool protects against everything: an unknown flaw, an already compromised device (it must be reinstalled), a phishing link someone clicks. QasbaGuard comes with no warranty: start with the simulation and keep your backups up to date.

This page was translated with AI. If in doubt, the French version prevails.