Does Windows 11 core isolation protect me against malware or does it have nothing to do with it? For example, an unsophisticated hacker with metasploit, nmap, msvenom or tools like that could create obfuscated malware or code that can run on a PC with the isolated core and RAM or that type of code. Or does malware for reverse shells not need to access those protected parts of the system?
-
You keep confusing "reverse shell" with malware and exploits. A reverse shell happens after malware exploits a machine.– schroeder ♦Mar 2 at 9:37
-
A lot of thanks, maybe u can say me how can an unsophisticated hacker exploit my machine outside my network without pishing or social engineering– carlos navarreteMar 2 at 9:45
-
1As I said from your previous question, that's too open-ended to answer. There are lots of ways. Hacking the router or your phone first is one way. But as I also said, I would challenge the idea that you are under an on-going "hack".– schroeder ♦Mar 2 at 9:47
-
But let's say that you are a hacker who uses conventional techniques, who does not have deep knowledge and who possibly learns by watching YouTube and forums, what kind of attacks to steal information from outside the network could he perform knowing a public IP and without the network having open ports or portfowarding and with firewalls and antivirus activated, from start to finish, I'm talking about not very complex attacks– carlos navarreteMar 2 at 10:15
-
Against the youtube-educated crowd basic steps like firewalls in routers and antivirus on the desktop are enough for usual private household environments. But these guys are not a significant threat actor anyway.– fleitnerMar 2 at 10:26
|
Show 2 more comments
1 Answer
You have a few things confused together. It is possible to create malware that includes a reverse shell that does not require "hacking" the system.
Core isolation helps to isolate high-security parts of Windows memory to prevent abuse and misuse of memory to gain privilege isolation. So, from this perspective, core isolation helps prevent certain ways of gaining access to the system through exploiting other programs.
As with all things in security, there is no single, simple, conclusive solution to complex problems.
-
Might be usefule to add support.microsoft.com/en-us/windows/… for clarity as what "core isolation" is from microsoft. Mar 2 at 22:08