Microsoft Releases Memory Integrity Scan Tool for Windows 10 and Windows 11
The integrity check of memory serves as a significant enhancement in fortifying the security of Windows 10 and Windows 11, introduced by Microsoft. Through its utilization, attempts at reading, injecting, or modifying memory data can be intercepted, thus preventing the theft of secure data stored within the memory, such as keys.
Its underlying principle is predicated on Virtualization-Based Security (VBS), which isolates and operates the memory virtually, thereby ensuring the integrity of kernel-mode code and shielding the kernel from malicious code infiltration. This feature, located within Microsoft Defender, Device Security, and Kernel Isolation, typically becomes operational post a system reboot once activated by the user.
However, the memory integrity check may encounter software and hardware compatibility issues. For instance, it may not support the AMD RYZEN 1000 or Intel 7th generation and earlier processors on Windows 11. Furthermore, compatibility issues may arise if the user has installed certain outdated drivers.
Moreover, the memory integrity check might lead to a decline in performance, necessitating a trade-off between enhanced security and performance compromise.
The choice of balance is left to the discretion of the user who can either enable or disable the memory integrity check. Additionally, Microsoft has introduced a command-line tool that can scrutinize the compatibility issues related to memory integrity, providing direct output prompts for any detected incompatibility.
Memory Integrity Scan Tool (hvciscan.exe) supports Windows 10, Windows 11, and Windows Server 2016/2019/2022.
Microsoft offers both 64-bit and ARM64-bit scan tools. Users employing AMD or Intel processors should opt for the AMD64 version, while those utilizing the Qualcomm Snapdragon series, including 8cx and Microsoft SQ series, should download the ARM64 version.
