Windows 10: Regarding "Memory Integrity" in Windows Security

• Does it negatively impact system performance?
• Do you advise turning it on for home PCs meant for casual use?
• Any other issues that I should be aware of before turning it on?

Thank you.

submitted by /u/workalkoholic
[link] [comments]

:)

 

Cannot Turn On Core Isolation Memory Integrity in Settings

From Tutorial -> Turn On or Off Core Isolation Memory Integrity in Windows 10 Windows 10 Tutorials

Not able to perform steps in Option 1
Under "Windows Defender Security Center", "Device Security" is not an option.
Winver reports Version 1709 (OS build 16299 402)
The processor is Intel I3
Virtualization is enabled in system BIOS.


Please advise.

 

Memory Integrity?

Hi.

Seems that some of these security features are more for Windows Defender and Virtualization.

I think that this sums it all up pretty well -

https://support.microsoft.com/en-us/...#hardwarescore

I'm just going with the defaults for now.
Memory Integrity is in the OFF state.

I'm not using Windows Defender on this system yet I am virtualizing Linux MInt 19.3 under VMware.

For me this means -

"Your device meets the requirements for enhanced hardware security."

You might also wish to read this -

What Are “Core Isolation” and “Memory Integrity” in Windows 10?

Let's bring in @Kari who is the resident virtualization expert for his opinions.

*Think

 

Memory integrity will not turn on

Hi leebojammin,

Thank you for bringing this up. On our understanding, you're trying to enable
Memory Integrity under Windows Defender. This feature is important against the injection or execution of malicious codes and malware. This said feature is disabled by default.
This is also known as “Hypervisor protected Code Integrity” (HVCI) based here: https://docs.microsoft.com/en-us/wi...ndows-defender-exploit-guard/memory-integrity

The Memory Integrity uses system's virtualization hardware, which is found under the BIOS/UEFI, and this hardware can only be used of one application at a time. Therefore, if you're using

Nested Virtualization on Hyper-V or any of your virtual machines, this will prohibit enabling the Memory Integrity at the same time.

Please see more relevant and helpful information here: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity

Kind regards.