Expanding memory integrity protection across Windows devices

Both memory integrity and Credential Guard depend on Virtualization-based Security that provides the underlying isolated environment needed by both.  However they are independent security capabilities that provide different protections. Memory integrity uses VBS to ensure that only code which satisfies Windows kernel code-integrity policy is permitted to be executed in the kernel and prevents the validated kernel code from being modifiable. Credential Guard meanwhile is a feature that uses VBS to isolate enterprise credentials such as NTLM password hashes or Kerberos Ticket Granting Tickets (TGTs) so that any possible malicious code running in the user or kernel mode in Windows cannot access or leak these credentials. They are both important security capabilities that work independently of each other.