PP075: Kernel Vs. User Mode In Endpoint Security Software
Aug 19, 2025
43:39
forum Ask episode
view_agenda Chapters
auto_awesome Transcript
info_circle Episode notes
Microsoft is rethinking allowing endpoint security software to run in the Windows kernel (including third-party and Microsoft’s own endpoint security software). While there are benefits to running security software in the kernel, there are also serious downsides (see the CrowdStrike outage). Dan Massameno joins JJ and Drew on Packet Protector to talk about the role... Read more »