Advice Request Windows core isolation or CFA memory protection

[Jan Willy]

My question: offers Windows core isolation a stronger protection as the memory protection from Controlled Folder Access (CFA)?
The question can be relevant because core isolation is not always possible, for example when it conflicts with a not compatible driver.
Could CFA-memory protection in that case be an equal alternative?

 

[ForgottenSeer 85179]

I wouldn't say it's a equal alternative and also HVCI is more for advanced/ business.
Also it sadly make problems with Defender network protection at the moment.

 

[shmu26]

Like @security123 said, they are two different things. It's like comparing apples and oranges. Most home users don't enable Memory integrity.

What trouble does it wreak on Defender network protection?

 

[Gandalf_The_Grey]

Like @security123 said, they are two different things. It's like comparing apples and oranges. Most home users don't enable Memory integrity.

What trouble does it wreak on Defender network protection?

Windows Defender network inspection service fails to start

Windows Defender network inspection service fails to start as reported here: https://www.tenforums.com/antivirus-firewalls-system-security/161859-windows-defender-network-inspection-service-fails-start.html. I have the first two error codes showing. The immediate solution is to disable Memory...

malwaretips.com

 

[Jan Willy]

Like @security123 said, they are two different things. It's like comparing apples and oranges. Most home users don't enable Memory integrity.

What trouble does it wreak on Defender network protection?

Windows own driver for network security service is not compatible (event 7000). LOL.
Edit
I hadn't seen the message from Gandalf.

 

[Moonhorse]

Since i installed windows 10 in 2015 , i have not used core isolation ( protecting memory) because my mobile modem drivers were uncompatible with it

Lately i bought new 4g modem with actual router + so i can use ethernet cable instead of usb c, wich makes it possible to use core isolation

But the problem with core isolation turned on is , performance loss. Should i turn this off if it affects to my gaming, i mostly get 50 fps on java based game, but nowadays with core isolation its bouncing between 10-50

Is this thing worth the possible performance loss? Im not upgrading this system to windows 11, just running it windows 10 until i buy 11 desktop

 

[silversurfer]

Since i installed windows 10 in 2015 , i have not used core isolation ( protecting memory) because my mobile modem drivers were uncompatible with it

Lately i bought new 4g modem with actual router + so i can use ethernet cable instead of usb c, wich makes it possible to use core isolation

But the problem with core isolation turned on is , performance loss. Should i turn this off if it affects to my gaming, i mostly get 50 fps on java based game, but nowadays with core isolation its bouncing between 10-50

Is this thing worth the possible performance loss? Im not upgrading this system to windows 11, just running it windows 10 until i buy 11 desktop

My user experience with enabled Core Isolation, works well with MD on Windows 10. No issues even with KSC free or F-Secure Safe.
Performance, I had never any issue. However, I'm not a gamer...
Protection wise, how effective really is Core Isolation? some people said isn't worth others said just the opposite

 

[Moonhorse]

My user experience with enabled Core Isolation, works well with MD on Windows 10. No issues even with KSC free or F-Secure Safe.
Performance, I had never any issue. However, I'm not a gamer...
Protection wise, how effective really is Core Isolation? some people said isn't worth others said just the opposite

For me the difference is like day and night, with core isolation on i cant run game on full hd ( old java game) because fps is soo low. And with core isolation off i can run it full hd 60 fps wich is capped. The game is only using one core wich makes it sounds crazy that im talking about full hd in game

I though its problem with edge, then i went to antivirus and even swappped it... and now i realised i had core isolation turned off for whole 7 years i had this desktop , so core isolation on it somehow messes with my amd cpu i guess

 

[shmu26]

If I remember right, you can't run virtual box or vmware.