Need some quick expert opinions. Is Sandboxie necessary or offer any benefits if you’re using Windows 11 IOT Enterprise LTSC with Core Isolation?
Core Isolation has:
Memory Integrity - ON
Kernel-mode Hardware-enforced Stack Protection - ON
Local Security Authority Protection - ON
Credential Guard - ON
Microsoft Vulnerable Driver Blocklist - ON
TPM (Trusted Platform Module) - ON
Secure Boot - ON
My concern isn’t installing software but protecting my computer from outside threats (internet malware, viruses, ransomware, etc. ) from getting through when using web browsers and email.
Not an expert or anything but windows sandbox is also built into the pro version and allows for running software and such inside a dedicated vm. Sandboxie was good back in the day and also buffer zone pro. They are more for running a program in an isolated environment.
If it was me, stick with what’s built into windows. Anti virus software is already built into windows called defender and that does a good job when needed rarely.
Yea, the Windows built in sandbox is more for testing than actually surviving a reboot/shutdown and keeping an app protected which is why I used Sandboxie. The reason for the question is Windows 11 Enterprise Core Isolation seems to offer the same system protection as Sandboxie. I’m trying to eliminate Sandboxie completely and was just wondering if there was any benefit to sticking with it, plus it’s a little pricey paying the subscription for several years. I do make OS image backups so I’ll probably drop Sandboxie and rely on the built in core isolation and OS backups. The way I see it is Sandboxie is a software solution, where as core isolation is built in and native accomplishing basicly the same thing more or less.
If your threat model is ransomware, then remove your admin rights, keep Windows patched, look into app locker, Microsoft security baselines, you don’t need 3rd party software
Also watch this, Sami is an MVP for Windows, he knows his stuff.