windows-itpro-docs/windows/security/threat-protection/microsoft-defender-atp/overview-hardware-based-isolation.md

title, ms.reviewer, description, search.appverid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author, ms.localizationpriority, manager, audience, ms.collection, ms.topic, ms.author, ms.date

title	ms.reviewer	description	search.appverid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	author	ms.localizationpriority	manager	audience	ms.collection	ms.topic	ms.author	ms.date
Hardware-based isolation (Windows 10)		Learn about how hardware-based isolation in Windows 10 helps to combat malware.	met150	w10	manage	library	security	mjcaparas	medium	dansimp	ITPro	M365-security-compliance	conceptual	macapara	09/07/2018

Hardware-based isolation in Windows 10

Applies to: Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)

Hardware-based isolation helps protect system integrity in Windows 10 and is integrated with Microsoft Defender ATP.

Feature	Description
Windows Defender Application Guard	Application Guard protects your device from advanced attacks while keeping you productive. Using a unique hardware-based isolation approach, the goal is to isolate untrusted websites and PDF documents inside a lightweight container that is separated from the operating system via the native Windows Hypervisor. If an untrusted site or PDF document turns out to be malicious, it still remains contained within Application Guard’s secure container, keeping the desktop PC protected and the attacker away from your enterprise data.
Windows Defender System Guard	System Guard protects and maintains the integrity of the system as it starts and after it's running, and validates system integrity by using attestation.