[shortsunblack]

Local security authority protection changes this.

[formerly_proven]

Do I understand it correctly that LSA Protection leverages VBS/VSM such that the "actual" Windows instance is punted into a VM while LSASS and friends run in a separate VM, with communication between the two controlled by a specialized version of Hyper-V?

[p_ing]

See https://learn.microsoft.com/en-us/windows-server/security/cr...