AI Assist Is Core Isolation nessicary?

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
Is core isolation nessicary? I saw somewhere that it decreases pc performance, and some OC applications don’t work with it enabled.

I know security is important, but is there much risk of having this disabled?
 

Bot

AI-powered Bot
Verified
Apr 21, 2016
3,471
Core isolation is a security feature in Windows 10 that helps protect your computer from various types of attacks, such as those targeting the operating system's kernel. It works by isolating sensitive processes and data in a protected virtual environment called a "virtualization-based security" (VBS) container. While core isolation can enhance security, it's not absolutely necessary for every user.

Regarding performance, enabling core isolation may have a slight impact on your PC's performance, especially if your hardware doesn't support certain virtualization features. However, the impact is generally minimal and may not be noticeable in everyday use. If you have a modern computer with decent hardware, the performance impact should be negligible.

It is true that some overclocking (OC) applications may not work properly with core isolation enabled. This is because core isolation relies on virtualization features that may conflict with certain OC software. If you heavily rely on OC applications and experience compatibility issues, you may consider disabling core isolation temporarily while using those applications. However, keep in mind that disabling this security feature comes with some level of risk.

The risk of having core isolation disabled depends on your specific usage and security requirements. With core isolation disabled, your computer may be more vulnerable to certain types of attacks that target the kernel. If you frequently visit potentially unsafe websites, download files from untrusted sources, or engage in activities that increase your exposure to malware, then the risk of having core isolation disabled is higher.

Ultimately, it's a trade-off between security and performance/compatibility. If you prioritize security and are concerned about potential attacks, it's recommended to keep core isolation enabled. However, if you encounter compatibility issues with OC software or prioritize performance over security, you may consider disabling it, but be aware of the associated risks.
 

MuzzMelbourne

Level 15
Verified
Top Poster
Well-known
Mar 13, 2022
599
So, is this the same as QUBES Linux functionailty? Or, to a lesser extent, Whonix, which runs a seperate, but integrated, Gateway and Workstation VM.

I am trying to setup a QUBES test machine but my processor's are too old to run the required virtulisation software.

Whonix is great if you can put up with TOR network speeds.

Maybe QUBES in VMWare rather than Virtual Box.

I think this approach is very interesting though.
 
Last edited:

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
So, is this the same as QUBES Linux functionailty? Or, to a lesser extent, Whonix, which runs a seperate, but integrated, Gateway and Workstation VM.

I am trying to setup a QUBES test machine but my processor's are too old to run the required virtulisation software.

Whonix is great if you can put up with TOR network speeds.

Maybe QUBES in VMWare rather than Virtual Box.

I think this approach is very interesting though.
Im not sure. I'm pretty sure its a type of process isolation but I've noticed it provide some slowdowns. My CPU got about 10% faster with this turned off.
 
  • Like
Reactions: MuzzMelbourne

Victor M

Level 8
Verified
Well-known
Oct 3, 2022
380
If your game server participants don't complain about the speed, then why disable core isolation? My core i5 2015 ran astonishingly fast when I applied ReviOS to Win 11 23H2 - it totally removed Windows Defender plus some other things. But I missed the secure feeling of having core isolation so I re-installed Win 11.
 
Last edited:

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
If your game server participants don't complain about the speed, then why disable core isolation? My core i5 2015 ran astonishingly fast when I applied ReviOS to Win 11 23H2 - it totally removed Windows Defender plus some other things. But I missed the secure feeling of having core isolation so I re-installed Win 11.
I've noticed for me it causes stutters and my cpu runs about 10% slower. I'd rather keep it off, and I think im fine security wise with Kaspersky and Default Deny.
 

Victor M

Level 8
Verified
Well-known
Oct 3, 2022
380
my cpu runs about 10% slower
What is your CPU's model number ? I sorta remember you mentioning about getting a new machine ?

Well when I posted my ReviOS Win 11 configuration, and I mentioned the loss of core isolation; halan4096 just commented on my Comodo Firewall Beta 2024 and said using beta was insecure. And he didn't mention anything about core isolation virtualized security.
 

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
What is your CPU's model number ? I sorta remember you mentioning about getting a new machine ?

Well when I posted my ReviOS Win 11 configuration, and I mentioned the loss of core isolation; halan4096 just commented on my Comodo Firewall Beta 2024 and said using beta was insecure. And he didn't mention anything about core isolation virtualized security.
i9-14900k and 4090 as my gpu. Its overkill but im extremely happy using it, its amazing.
 
  • Like
Reactions: Victor M

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,677
Core Isolation on a relatively new machine that supports all the security specifications required by W11: TPM, Secure Boot, etc. should always be activated.

I'm using Kaspersky Premium 21.15a, and I have it enabled, of course I had to give up on keeping Kaspersky virtualization enabled, since only 1 Hypervisor can be enabled in the system, so I decided to keep W11 Core Isolation enabled in my new machine.
 

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
Core Isolation on a relatively new machine that supports all the security specifications required by W11: TPM, Secure Boot, etc. should always be activated.

I'm using Kaspersky Premium 21.15a, and I have it enabled, of course I had to give up on keeping Kaspersky virtualization enabled, since only 1 Hypervisor can be enabled in the system, so I decided to keep W11 Core Isolation enabled in my new machine.
I do have the Kaspersky Isolation on.

How much of a performance impact would the K isolation give? I already have enough performance, I'm just curious.
 

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
I did a little benchmarking, and the results actually suprised me alot.
Hardware Virtulization on or off in Kaspersky didnt change anything, but I'm suprised that turning off Kaspersky and using defender made my cpu 10-25% faster.

With Kaspersky and Hardware Virtulization On (Off was basically same score):
1705691650703.png


With Defender:
1705691686967.png



@harlan4096 do you have any performance tweaks I can try on K to make it lighter?
 

harlan4096

Moderator
Verified
Staff Member
Malware Hunter
Well-known
Apr 28, 2015
8,677
No, I don't have such tweaks, because that would means decrease security...

Also:

Time Spy is a DirectX 12 simulation test for gaming PCs running Windows 10. Time Spy, with the DirectX 12 engine intact, designed from the ground up to support new API features like asynchronous computing, explicit multi-adapter, and multi-threading, is the perfect simulator for testing the DirectX 12 performance of modern graphics cards.

So, that's not a actually CPU performance test, so irrelevant if You don't play with that system, and You will not notice any difference in normal daily working, anyway who wants security with an antivirus, has to make a small sacrifice... just live the life, be happy :)
 
  • Like
Reactions: Trident and Berny

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
No, I don't have such tweaks, because that would means decrease security...

Also:



So, that's not a actually CPU performance test, so irrelevant if You don't play with that system, and You will not notice any difference in normal daily working, anyway who wants security with an antivirus, has to make a small sacrifice... just live the life, be happy :)
They have it set to be like CPU at 100% usage, gpu at 100% usage - add scores then divide by 2. Unless im doing rendering (which I'm not), or intense video editing, you wont really need that extra cpu performance. I've tested it in games and so far, there doesnt appear to be a difference in performance between the two. Ill test out a few CPU bound games and see if there is any noticable change, but I will keep Kaspersky and Default Deny for the time being unless I switch to Checkpoint + Xcitium.
 
  • Like
Reactions: harlan4096

Xeno1234

Level 14
Thread author
Jun 12, 2023
699
They have it set to be like CPU at 100% usage, gpu at 100% usage - add scores then divide by 2. Unless im doing rendering (which I'm not), or intense video editing, you wont really need that extra cpu performance. I've tested it in games and so far, there doesnt appear to be a difference in performance between the two. Ill test out a few CPU bound games and see if there is any noticable change, but I will keep Kaspersky and Default Deny for the time being unless I switch to Checkpoint + Xcitium.
Tested a few games, appear to be VERY similar in results, since most of the time my GPU is doing the heavy lifting. I'd rather have Kaspersky than 1-2 less fps when my PC is pushing 100-200+ in every game.
 
Last edited:

tobythomas

New Member
Feb 5, 2024
1
Core isolation is not strictly necessary, but it enhances security by isolating critical system processes from potential attacks. While it can slightly impact PC performance and may not be compatible with certain overclocking applications, the trade-off for increased security is generally worthwhile. Disabling it may introduce some risks, but the extent depends on individual usage and the level of sensitivity to potential security threats.
 

RoboMan

Level 35
Verified
Top Poster
Content Creator
Well-known
Jun 24, 2016
2,400
Core Isolation on a relatively new machine that supports all the security specifications required by W11: TPM, Secure Boot, etc. should always be activated.

I'm using Kaspersky Premium 21.15a, and I have it enabled, of course I had to give up on keeping Kaspersky virtualization enabled, since only 1 Hypervisor can be enabled in the system, so I decided to keep W11 Core Isolation enabled in my new machine.
Does Kaspersky's virtualization add any security to the machine? Or is it necessary for any module to perform correctly? Or what's its purpose?
 

SeriousHoax

Level 47
Verified
Top Poster
Well-known
Mar 16, 2019
3,637
Does Kaspersky's virtualization add any security to the machine? Or is it necessary for any module to perform correctly? Or what's its purpose?
Kaspersky use their own hypervisor for kernel hooking. Without it, Kaspersky's protection quality for its behavior blocker may decrease against certain types of malware. But I don't know to what extent and also don't know if enabling Core Isolation disables Kaspersky's kernel hooking. It seems Kaspersky doesn't share enough info about it anywhere and for good reasons I assume.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top