---
# System prepended metadata

title: W11 Security

---

# W10
* UEFI
* Kernel Driver Integrity
* MFA 
* Hello
* WSL
* Defender
    * AMSI
    * ASR
    * Credential Guard
    * Exploit PRotection
    * Smart Screen (Spartan)
* Forensics
    * amache
    * Spartan
    * Reycle
    * Prefectch Thumbs

# W11 Security
![image](https://hackmd.io/_uploads/HJ1450jtT.png)


## Kernel
* V.B.S. Virtualization Based Security
    * VTL : Virtual Trust Level
* HV.C.I.  / K.M.C.I.
* DMA Protect (PCIe)
* ASR 
    * F(irmware)ASR

## Windows 11 OS
* Secure Boot 
* Trusted Boot
* KIOSK
* Azure
    *  Device Health Attestation
    *  Config Resfresh
    *  Remote Wipe
    *  AutoPatch
*  Bitlocker "To Go"
*  Windows Hello
    *  PDE
*  Mail Encryption (Exchange Only)
*  UWP
    *  App Control
    *  App Container
    *  Win SandBox
* Remote Credential Guard
* AV 
    * Controled Folder Access

## Network 
* DNS Sec / DOH
* MS.QUIC
* BLE Policicies
* Universal Windows Platform
* RDMA / SMB over QUIC

# Forensics
* PCA (Compat)
