New Improvements to Windows Defender (Spring Creators Update)

[Ink]

Learn more: Windows Defender System Guard: Making a leap forward in platform security with memory integrity - Microsoft Tech Community - 167303

In an upcoming release of Windows 10, we will be bringing a subset of VBS features to all editions of Windows to ensure our customers remain safe from increasingly sophisticated attacks. Devices that meet hardware and firmware requirements will have parts of VBS enabled by default. Additionally, as part of this effort, Hypervisor protected code integrity (HVCI) will also be available and turned on by default in clean installs; for older systems, customers will have the ability to opt in post upgrade using the UI in Windows Defender Security Center (WDSC). This enhancement will ensure that the kernel process that verifies code integrity runs in a secure runtime environment provided by VBS.

Device Security
Given the reliance on hardware and the need to have compatible kernel drivers, enabling a feature like memory integrity can be challenging even for adept users. In the next Windows 10 version, we will make enablement simple and straightforward to the end user.

The Windows Defender Security Center app will include a new section called Device security.

Not all features are available for the Home and Pro users.

via Microsoft announces new improvements for Windows Defender Application Guard - MSPoweruser

 

[DeepWeb]

Here is something I found in Project Honolulu that really makes me scratch my head.

In Project Honolulu for Windows Server you can change your firewall rules through your browser. Why can't regular end users have this type of access as well? Even the redesign would be more than enough. Right now Windows Firewall is stuck with Vista's layout which does the job but it's hard to navigate and looks outdated.

Project Honolulu is the successor of Microsoft Management Console (MMC). By turning it web based they have really done some massive leaps. Hopefully this will also arrive on mainstream end user machines.

 

[Av Gurus]

Here are some old/new stuff in WDSC of new Windows 10 build v1803:

 

[Ink]

Their existing Exploit Protection module is far too complex for consumers to understand. I imagine Device Security will suffer the same fate.

 

[Av Gurus]

Are others have problem turning ON this new options:
Core Isolation>Memory integrity