Windows Security is a built-in antivirus package in Microsoft’s operating system, and it provides solid protection for most users. However, several security features are turned off by default – one of them is memory integrity. This setting protects memory from malicious applications that try to use Windows drivers to take control of your computer.
When you turn on this option, it is activated Virtualization Based Securitywhich isolates the code verification function from the operating system and adds another layer of verification to the process.
The benefit of having memory integrity turned off is a smoother experience with apps – some may not function properly when this option is turned on, as the extra layer of protection can interfere with code execution. On the other hand, if you turn on memory integrity, you don’t have to worry about malicious programs bypassing normal integrity checks.
Another downside to turning on memory integrity is that older systems may experience performance degradation.
You can test yourself how your system reacts to memory integrity enabled — enabling and disabling this feature is quick and easy. To turn it on, type “Windows Security” in the Windows search or Start menu. If it’s turned off, you’ll probably see a notification in your Control Panel settings under “Device security.” Click the button, then “Core Isolation”. Under Memory Integrity, toggle the switch to turn it on. To turn this feature off later, simply return to the same settings and click the switch again.
This setting is not the only one that Microsoft leaves off by default, in order to balance security and a simple user experience. You can also turn on ransomware attack protection that protects the folders you choose, preventing suspicious apps from taking control of your data and locking you out, as well as stricter app checks.
The post Windows Security: What is memory integrity and why is it turned off by default? appeared first on ITNetwork.
Source: www.itnetwork.rs
