
Microsoft Defender Application Guard enhancements:.Improved support for non-ASCII file paths.Emergency outbreak protection: updates devices automatically with "new intelligence" when outbreaks are detected.Tamper-proofing capabilities: Virtualization-based security that isolates Microsoft Defender for Endpoint security from the OS and potential attackers.Integrity enforcement capabilities: runtime attestation of Windows 10.Next Generation protection: extended to protect against ransomware, credential misuse, and removable storage attacks.Attack surface area reduction: administrators may configure advanced web protections to set allow and deny lists for URLs and IP addresses.Support for Windows Subsystem for Linux (WSL).Enhanced Windows Defender Firewall event logs.Integrated Internet Protocol Security (IPsec), to enforce "authenticated, end-to-end network communications".Reduce the attack surface of a device through rules that restrict or allow traffic using properties such as IP addresses, ports, or program paths.Windows Defender Firewall: includes several new features.Bitlocker and Mobile Device Management (MDM) with Azure Active Directory: better protection against accidental password disclore though a "new key-rolling feature" which "securely rotates recovery passwords on MDM-managed devices".Windows Security app: includes Protection history, including Controlled Folder Access blocks, and Windows Defender Offline Scanning tool actions.Devices that support version 3, the strongest protection, will be released soon as they require new hardware, according to Microsoft.

Microsoft notes that there are three versions of SMM Firmware Protection. Windows Defender "enables an even higher level of System Management Mode (SMM) Firmware Protection" to detect a higher level of SMM compliance. It is designed to "reduce the firmware attack surface". System Guard: Improved SMM Firmware Protection feature, which is built on top of System Guard Secure Launch.Microsoft highlights the following core improvements in the new LTSC 2021 version of Windows 10: Windows 10 Enterprise LTSC 2021 will be supported until 2026 by Microsoft, that is three years less than the support lifecycle of Windows 10 Enterprise LTSC 2019.
