You would need one other thing- an Outbound alerting firewall.
Shadow Defender doesn't prevent things like keyloggers from working and certainly won't block them from transmitting. The logger will be wiped clean on reboot, but the damage would already have been done.
In practice , when you use SD in shadow mode, it means you are suspecting possible infections, so you are not supposed to input sensitive datas or credentials.
You would need one other thing- an Outbound alerting firewall.
Shadow Defender doesn't prevent things like keyloggers from working and certainly won't block them from transmitting. The logger will be wiped clean on reboot, but the damage would already have been done.