Weerarada internetka ayaa isbedelay dhowrkii sano ee la soo dhaafay. Hackers-ku hadda way la wareegi karaan PC-gaaga oo way xidhi karaan faylasha ilaa aad diyaar u tahay inaad lacag siiso. Weerarada noocaan ah waxaa loo yaqaan Ransomware , waxayna adeegsadaan faa'iidooyin heer kernel ah oo isku dayaya in ay ku socodsiiyaan malware-ka leh mudnaanta ugu sareysa, tusaale, WannaCry iyo Petya ransomware. Si loo yareeyo weerarada noocaan ah, Microsoft waxa ay soo saartay qaab kuu ogolaanaya inaad awood u siiso Core Isolation iyo Integrity Memory^{(Core Isolation and Memory Integrity)} si looga hortago weerarradan.

Xarunta Amniga Difaaca^{(Defender Security Center)} Windows ayaa bixisa sifadan. Waxaa loogu yeeraa Ammaanka Aaladda ,^{(Device Security, )} waxa ay bixisaa ka warbixinta heerka iyo maaraynta sifooyinka amniga lagu dhex dhisay aaladahaaga – oo ay ku jiraan sifada beddelka si loo bixiyo ilaalin la xoojiyey. Si kastaba ha ahaatee, kuma shaqeeyo heerka software; qalabku wuxuu u baahan yahay inuu sidoo kale taageero. Farsameeyahaagu waa inuu taageeraa  Virtualization, kaas oo awood u siinaya Windows 11/10 PC inuu ku socodsiiyo codsiyada weelka, si aanay u helin qaybaha kale ee nidaamka.

Qalabkaagu waa inuu buuxiyaa shuruudaha badbaadada qalabka caadiga ah Tani waxay la macno tahay in aaladdaadu ay taageerto daacadnimada xusuusta iyo go'doominta xudunta ah oo waliba:

• TPM 2.0 (sidoo kale loo yaqaan processor-kaaga amniga)
• Boot sugan waa la furay
• DEP
• UEFI MAT

Ka yeel Go'doominta Muhiimka^{(Core Isolation)} ah & daacadnimada xusuusta^{(Memory Integrity)} gudaha Windows 11

Waxay u badan tahay inay tahay habka ugu fudud ee lagu suurtagelin karo ama lagu joojin karo Amniga^(Security) ku saleysan Virtualization gudaha Windows 11 . Si kale haddii loo dhigo, waxaad u baahan tahay inaad awood u yeelatid go'doominta Core^{(enable Core isolation)} si loo sameeyo. Taas, samee waxyaabaha soo socda:

• Ka raadi  amniga daaqadaha ^{(windows security )} sanduuqa raadinta Taskbar.
• Guji^(Click) natiijada raadinta shakhsi ahaaneed.
• U beddelo   tab ammaanka aaladda.^{(Device security)}
• Guji  ikhtiyaarka faahfaahinta go'doominta Core .^{(Core isolation details )}
• Daar  badhanka daacadnimada xusuusta  si aad u shido.^{(Memory integrity )}
• Dib u bilaw kombayutarkaga

Ka yeel go'doominta xudunta^{(Core Isolation)} ah iyo daacadnimada xusuusta^{(Memory Integrity)} gudaha Windows 11/10

1. Soo gal maamule ahaan oo fur Xarunta Amniga Difaacaha Windows^{(Windows Defender Security Center)}
2. Raadi ikhtiyaarka Amniga Aaladda .^{(Device Security)}
3. Halkan waa inaad ka hubisaa haddii Go'doonka Core^{(Core Isolation)} ee Virtualization ka yahay kombuyutarkaaga.
4. Go'doominta xudunta ahi waxa ay ^{(Core isolation)}bixisaa^(y) sifooyin sugan oo ku salaysan makhluuqaad si loo ilaaliyo qaybaha ubucda ah ee qalabkaaga.
5. Guji^(Click) faahfaahinta go'doominta xudunta^(Core) ah, waxaana lagu siin doonaa si aad awood ugu yeelato daacadnimada xusuusta^{(Memory Integrity)} .

Xumaannimada xusuusta^{(Memory integrity)} (Hypervisor-la ilaaliyo daacadnimada koodhka) waa astaanta amniga ee go'doominta Core taasoo ka hortagaysa weerarrada gelinta kood xaasidnimo ah hababka amniga sare. Daar^(Toggle) si aad u shido

Marka la furo, waxay ku weydiin doontaa inaad dib u bilowdo PC si aad si buuxda u awood u yeelato Integrity Memory^{(Memory Integrity)} .

Haddii mardambe, aad la kulanto arrimo ku habboon codsiga, waxaa laga yaabaa inaad u baahato inaad tan damiso.

la xidhiidha^(Related) : daacadnimada xusuusta ayaa cirroobtay ama ma dami doonto/ dami mayso .

Karti ama demi go'doominta xudunta^{(Core Isolation)} ah iyo daacadnimada xusuusta^{(Memory Integrity)} adoo isticmaalaya Diiwaanka

Waxa kale oo aad isticmaali kartaa Diiwaanka^(Registry) , si aad awood ugu yeelatid ama aad u joojisid daacadnimada xusuusta^(Memory) go'doominta Core addoo isticmaalaya ^(Core)Registry Editor , raac talaabooyinkan:

1. Riix Win+R si aad u furto Run dialog.
2. Ku qor regedit oo ku dhufo badhanka Gelida .^(Enter)
3. Guji ikhtiyaarka Haa .^(Yes)
4. U gudub Scenarios gudaha HKEY_LOCAL_MACHINE .
5. Midig ku dhufo Scenarios > New > Key .
6. U sheeg sida HypervisorEnforcedCodeIntegrity .
7. Midig ku dhufo> New > DWORD (32-bit) Value .
8. U magacow^(Enabled) sidii karti .
9. Laba-guji si aad u dejiso xogta Qiimaha sida ^(Value)1 si aad u awood u yeelato iyo 0 si aad u damiso.
10. Guji badhanka OK
11. Dib u bilaw kombayutarkaga

Si aad wax badan uga barato tillaabooyinkan, sii wad akhriska.

Ka taxaddar:^{(Precaution: )} Kahor intaadan u dhaqaaqin tillaabooyinka REGEDIT , ha ilaawin inaad abuurto barta Soo celinta Nidaamka .

Si aad u bilowdo, taabo Win+R si aad u furto Run dialog, ku qor regedit, oo ku dhufo badhanka Enter . Haddii degdega UAC uu ka soo muuqdo shaashaddaada, dhagsii ikhtiyaarka Haa si aad u ^{(Yes )}furto Tifaftiraha Diiwaanka .

Marka xigta, u gudub jidka soo socda:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios

Midig ku dhufo furaha Muuqaallada> Cusub ^{(Scenarios )}New > Key , oo u magacow HypervisorEnforcedCodeIntegrity^{(HypervisorEnforcedCodeIntegrity)} .

Markaa, waa inaad abuurtaa REG_DWORD qiime. Taas awgeed, midig-guji HypervisorEnforcedCodeIntegrity > New > DWORD (32-bit) Value , oo u magacow^(Enabled) sida karti .

Sida caadiga ah, waxay la socotaa xogta Qiimaha ^(Value)0 , taasoo la micno ah inay naafo tahay. Si kastaba ha noqotee, haddii aad rabto inaad awood u yeelatid shaqadan, laba jeer guji si aad u dejiso xogta Qiimaha sida ^(Value)1 .

Guji badhanka OK oo dib u bilow kombayutarkaga.

Taasi waxay tidhi, waxaa jira laba ikhtiyaar oo kale oo laga yaabo in la heli karo iyadoo ku xiran qalabka kombuyuutarkaaga.

1. Processor-ka ammaanku^{(Security Processor)} waxa uu soo baxaa oo keliya haddii aad haysato TPM oo la heli karo qalabkaaga PC. Waa chips discrete oo ay OEM -yada ku iibiyeen Motherboard-ka kombiyuutarka . Si aad uga faa'iidaysato TPM , OEM waa inay si taxadar leh u dhexgelisaa qalabka nidaamka iyo qalabaynta TPM si ay u soo dirto amarada ugana falceliso jawaabaheeda. TPM^(TPMs) -yada cusub waxay sidoo kale ku siin karaan faa'iidooyin amni iyo gaar ah qalabka nidaamka laftiisa. Markaa iska hubi inaad kuwaas oo dhan iska hubiso haddii aad iibsanayso PC cusub.
2. Boot aamin^{(Secure Boot)} ah waxay ka hortagtaa koodka xaasidnimada ah in lagu shubo ka hor OS-kaaga. Way adagtahay in la dildilaaciyo laakiin leh kabo sugan ayaa la daryeelay.

Windows 11/10 waxa kale oo ay bixisaa Hypervisor Protected Code Integrity ( HVCI ) marka aad ku bilowdo rakibo nadiif ah. Kuwa ku jira qalabkii hore, waxay yeelan doonaan awood ay ku doortaan boostada cusboonaysiinta iyagoo isticmaalaya UI ee Xarunta Amniga Difaaca Windows^{(Windows Defender Security Center)} ( WDSC ). Kobcintani waxay hubin doontaa in habka kernel-ka ee xaqiijiya daacadnimada koodka uu ku socdo jawi runtime sugan oo sugan.

Akhriso^(Read) : Amniga ku salaysan fakarka lagama shaqaynin Windows 11^{(Virtualization-based Security not enabled in Windows 11)} .

Enable or Disable Core Isolation and Memory Integrity in Windows 11/10

Cyber-attacks have changed over the past few years. Rogue hackers can now take over your PC and lock dоwn files unless you are ready tо pay them money. Thesе types of аttacks are called Ransomware, and they use kernel-level exploits that attempt to run malware with the highest privileges, e.g., WannaCry and Petya ransomware. In order to mitigate these types of attacks, Microsoft has rolled out a feature that allows you to enable Core Isolation and Memory Integrity to prevent such attacks.

Windows Defender Security Center offers this feature. Called Device Security, it offers status reporting and management of security features built into your devices – including toggling features on to provide enhanced protection. However, It doesn’t work on a software level; the hardware needs to support it as well. Your firmware should support Virtualization, which enables the Windows 11/10 PC to run applications in a container, so they don’t get access to other parts of the system.

Your device must meet the requirements for standard hardware security This means your device should support memory integrity and core isolation and also have:

• TPM 2.0 (also referred to as your security processor)
• Secure boot enabled
• DEP
• UEFI MAT

Enable Core Isolation & Memory Integrity in Windows 11

It is probably the easiest way to enable or disable Virtualization-based Security in Windows 11. In other words, you need to enable Core isolation to get it done. For that, do the following:

• Search for windows security in the Taskbar search box.
• Click on the individual search result.
• Switch to the Device security tab.
• Click on the Core isolation details option.
• Toggle the Memory integrity button to turn it on.
• Restart your computer.

Enable Core Isolation & Memory Integrity in Windows 11/10

1. Sign in as an administrator and open Windows Defender Security Center
2. Look for Device Security option.
3. Here you should check if Core Isolation under Virtualization is enabled on your PC.
4. Core isolation provides virtualization-based security features to protect core parts of your device.
5. Click on Core isolation details, and you will be offered to enable Memory Integrity.

Memory integrity (hypervisor-protected code integrity) is a security feature of Core isolation that prevents attacks from inserting malicious code into high-security processes. Toggle to turn it On.

Once enabled, it will ask you to restart the PC to completely enable Memory Integrity.

If later on, you face application compatibility issues, you may need to turn this off.

Related: Memory Integrity greyed out or won’t Turn On/Off.

Enable or Disable Core Isolation and Memory Integrity using Registry

You can also use the Registry, to enable or disable Core isolation Memory integrity using Registry Editor, follow these steps:

1. Press Win+R to open the Run dialog.
2. Type regedit and hit the Enter button.
3. Click on the Yes option.
4. Navigate to Scenarios in HKEY_LOCAL_MACHINE.
5. Right-click on Scenarios > New > Key.
6. Name it as HypervisorEnforcedCodeIntegrity.
7. Right-click on it > New > DWORD (32-bit) Value.
8. Name it as Enabled.
9. Double-click on it to set the Value data as 1 to enable and 0 to disable.
10. Click the OK button.
11. Restart your computer.

To learn more about these steps, keep reading.

Precaution: Before heading to the REGEDIT steps, don’t forget to create a System Restore point.

To get started, press Win+R to open the Run dialog, type regedit, and hit the Enter button. If the UAC prompt appears on your screen, click on the Yes option to open the Registry Editor.

Next, navigate to the following path:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios

Right-click on the Scenarios key > New > Key, and name it as HypervisorEnforcedCodeIntegrity.

Then, you have to create a REG_DWORD value. For that, right-click on HypervisorEnforcedCodeIntegrity > New > DWORD (32-bit) Value, and name it as Enabled.

By default, it comes with a Value data of 0, meaning it is disabled. However, if you want to enable this functionality, double-click on it to set the Value data as 1.

Click the OK button and restart your computer.

That said, there are two more options that might be available depending on the hardware of your PC.

1. Security Processor only shows up if you have TPM available with your PC hardware. They are discrete chips soldered to a computer’s motherboard by the OEM. To get the most out of TPM, OEM must carefully integrate system hardware and firmware with the TPM to send it commands and react to its responses. The newer TPMs can also provide security and privacy benefits to the system hardware itself. So make sure to check for all of these if you are buying a new PC.
2. Secure Boot prevents malicious code to load up before your OS. They are hard to crack but with secure boot it’s taken care of.

Windows 11/10 also offers Hypervisor Protected Code Integrity (HVCI)  when you start with clean installs. Those who are on old hardware, will have the ability to opt-in post the upgrade using the UI in Windows Defender Security Center (WDSC). This enhancement will ensure that the kernel process that verifies code integrity runs in a secure runtime environment.

Read: Virtualization-based Security not enabled in Windows 11.

Related posts

• U oggolow ilaalinta codsiyada suurtagalka ah ee aan la rabin gudaha Windows 11/10

• Sida galka looga saaro iskaanka difaaca Windows gudaha Windows 11/10

• Ma daari karo Windows Defender gudaha Windows 11/10

• Sida loo furo Xarunta Amniga Windows gudaha Windows 11/10

• Samee iskaanka khadka tooska ah ee Difaaca Windows wakhtiga bootinta gudaha Windows 11/10

• Hagaaji Crypt32.dll lagama helin ama khalad ka maqan Windows 11/10

• Demi dejinta daacadnimada xusuusta haddii Windows aysan soo dejin karin darawalka

• Sida loo beddelo kamaradaha caadiga ah ee kumbuyuutarka Windows 11/10

• Sida loo hagaajiyo 100% Disk, CPU High, isticmaalka xusuusta sare ee Windows 11/10

• Sida loo nadiifiyo Memory Cache gudaha Windows 11/10

• Dejinta isku xidhka oo aan shaqaynayn ama ka cirroonayn Windows 11/10

• Hagaaji Chrome sare ee CPU, Memory ama isticmaalka Disk gudaha Windows 11/10

• Explorer.exe High Memory ama isticmaalka CPU gudaha Windows 11/10

• Tweak Core Parking, dejimaha cabbiraadda inta jeer ee CPU gudaha Windows 11/10

• Sida loo suurto geliyo ama loo joojiyo astaanta abka Archive gudaha Windows 11/10

• Sida loo isticmaalo Charmap iyo Eudcedit qalabyada ku dhex dhisan ee Windows 11/10

• Waa maxay faylka PLS? Sida loo abuuro faylka PLS gudaha Windows 11/10?

• Software-ka ugu fiican ee ISO Mounter ee bilaashka ah ee Windows 11/10

• Qalabka dib-u-ciyaarista HDMI oo aan ka muuqanayn Windows 11/10

• Sida loo furo guryaha nidaamka ee Control Panel gudaha Windows 11/10