Configuring and managing Windows Defender Credential Guard
A lot of businesses are still using numerous security measures to enforce password complexity, recommend password best practices and hygiene, and even require password changes or resets on a scheduled basis. Let’s be honest – the world of security and password management has changed drastically, and passwords are now the weakest link in the security chain.
One of the ways we can protect and isolate these frequently used secrets is to utilize a virtualization-based security model called Windows Defender Credential Guard, which is backed by hardware security to deter targeted and credential theft attacks in the wild. This model blocks unauthorized access to the secrets so that only the Windows-privileged subsystem can gain access to them. For instance, when Credential Guard is enabled on a Windows system, the lsass.exe process is wrapped with Credential Guard and runs the Lsalso.exe process with the added protections...
