New Improvements to Windows Defender (Spring Creators Update)

Status
Not open for further replies.

Ink

Administrator
Thread author
Verified
Jan 8, 2011
22,318
2
55,055
8,379
Learn more: Windows Defender System Guard: Making a leap forward in platform security with memory integrity - Microsoft Tech Community - 167303

In an upcoming release of Windows 10, we will be bringing a subset of VBS features to all editions of Windows to ensure our customers remain safe from increasingly sophisticated attacks. Devices that meet hardware and firmware requirements will have parts of VBS enabled by default. Additionally, as part of this effort, Hypervisor protected code integrity (HVCI) will also be available and turned on by default in clean installs; for older systems, customers will have the ability to opt in post upgrade using the UI in Windows Defender Security Center (WDSC). This enhancement will ensure that the kernel process that verifies code integrity runs in a secure runtime environment provided by VBS.

Device Security
Given the reliance on hardware and the need to have compatible kernel drivers, enabling a feature like memory integrity can be challenging even for adept users. In the next Windows 10 version, we will make enablement simple and straightforward to the end user.

The Windows Defender Security Center app will include a new section called Device security.

large


Not all features are available for the Home and Pro users.

via Microsoft announces new improvements for Windows Defender Application Guard - MSPoweruser
 
Last edited:
Here is something I found in Project Honolulu that really makes me scratch my head.
honolulu-014.png


In Project Honolulu for Windows Server you can change your firewall rules through your browser. Why can't regular end users have this type of access as well? Even the redesign would be more than enough. Right now Windows Firewall is stuck with Vista's layout which does the job but it's hard to navigate and looks outdated.

Project Honolulu is the successor of Microsoft Management Console (MMC). By turning it web based they have really done some massive leaps. Hopefully this will also arrive on mainstream end user machines.
 
Are others have problem turning ON this new options:
Core Isolation>Memory integrity

core iso.jpgmem.jpg
 
  • Like
Reactions: Gandalf_The_Grey
Status
Not open for further replies.