In addition to the hardware-based security features, the latest Windows release comes with Windows Defender built-in for basic malware protection.
Secure Boot, Trusted Boot, and Measured Boot prevent unauthorized software from running by checking the software loaded during the boot sequence. These features are crucial for preventing rootkits - a type of malware that typically loads at startup, bypassing operating system security.
Hypervisor-protected code integrity (HVCI), better known as memory integrity, is a virtualization feature that verifies the integrity of the code running in the Windows kernel. It prevents malicious code from running and helps users protect themselves from exploits. Even if the system gets infected with malware, the malware can be contained and its damaging effects reduced. Virtualization-based security (VBS) is used to create and isolate a region of memory from the rest of the operating system so processes can run in a secure and controlled environment, called 'virtual secure mode'. With Windows 11, Microsoft is focusing on security in response to rapidly evolving cyberthreats. Windows 11 requires newer CPUs and motherboards that can support advanced security features such as virtualization-based security (VBS), memory integrity or hypervisor-protected code integrity (HVCI), and Secure Boot. These features are turned on by default to increase protection against malware.
