Windows 10: Drivers and Core Isolation Memory Integrity Issues blocking Windows 10 security features.

Hello, I seem to see more and more hardware drivers attaching to a device and disabling the Windows 10 Core Isolation Memory Integrity Security features.


I have ran sigverif and they are approved signed drivers. My question is how are they signed and approved for use on Microsoft Windows 10 if they are disabling memory integrity? This has happened many times now for me on different systems. Is there a sigverif that can be run exclusively for Windows 10 to address this issue. The version of the program does not check for Core Isolation issues. It seems sigverif had not been adapted or improved for current security features now included with Windows 10. This inside of a high security system creates a security hole and needs to be addressed. "Logitech Pro900" causes a major security flaw and fully disables Memory integrity. Also older versions of Western digital drives.











If drivers are incompatible with systems for key security features, how are not unlocked for deletion?


Please Microsoft, address and update you "sigverifi" driver tool to disable and flag these drivers. Key Security features should be addressed and many older drivers that need to be updated to current requirements. Or a warning issued that installing this will disable core isolation. System admins need to be able to block drivers that can disable security features for high security systems.

:)

 

Cannot Turn On Core Isolation Memory Integrity in Settings

From Tutorial -> Turn On or Off Core Isolation Memory Integrity in Windows 10 Windows 10 Tutorials

Not able to perform steps in Option 1
Under "Windows Defender Security Center", "Device Security" is not an option.
Winver reports Version 1709 (OS build 16299 402)
The processor is Intel I3
Virtualization is enabled in system BIOS.


Please advise.

 

Core Isolation & Memory Integrity

Hi Angelo,

Thanks for the question!

One Device security is Core isolation that provides virtualization-based security features to protect core parts of your device.

Memory integrity is a security feature of Core isolation that prevents attacks from inserting malicious code into high-security processes.

So the question is...will this slow down your system?

The answer would be - yes; but, with caveats. Having a virus scanner slows down your system, installing a lot of software on your computer slows it down - its really about the cost-benefit analysis. As this would protect you from someone inserting malicious
code, I would say keep it on. It's just another layer of protection and the process should not overrun your memory too much.

 

Windows security Core Isolation Memory Integrity

Windows 10 Pro, logged in as Admin, Core Isolation/Memory Integrity will not allow to be disabled, "Setting is managed by Administrator" Have Kaspersky installed, when first logging in I get alert on screen stating "Code Integrity control is enabled in
operating system. Some application features are disabled."