[Alan Turing]

On Windows, I use a layered defense system starting with common sense and EMET. If anything gets past those, it's pretty hardcore already.
After EMET comes Comodo's AV and firewall products, as well as their HIPS system.
If I still manage to get pwned after that, I have DeepFreeze installed on my computer and the C: drive is frozen.
My bootloader is the TrueCrypt bootloader so I would assume I'd notice pretty quickly if anything touched my MBR to try to circumvent DF.

This is overkill for anyone. I work in a high-risk environment.

What's your *nix setup? Any snort?