A built-in feature of Windows 10 is the ability to isolate the kernel. What this means in practice is that critical processes run in a virtual environment, all designed to prevent malicious code from being smuggled into system processes under any circumstances. To use this protection, you need a compatible motherboard and an Intel or AMD processor that is also prepared to run in a virtual environment. The main concern with processors is to ensure that the integrity of registers is not compromised – we have seen examples in the past of this being a cause for concern.
