3 ms·
MS posted an image from Process Explorer: https://cloudblogs.microsoft.com/uploads/prod/sites/13/2018/10/windows-defender-av-sandbox.png https://cloudblogs.micr
by hs86 8y ago
MS posted an image from Process Explorer: https://cloudblogs.microsoft.com/uploads/prod/sites/13/2018/10/windows-defender-av-sandbox.png https://cloudblogs.microsoft.com/uploads/prod/sites/13/2018/...
Notice how the child process is running with an "AppContainer" integrity level.
- youdontknowtho 8y agoThanks. It seems like this would be a good candidate for the virtualization based isolation that they built for protecting LSASS.