Subscribe
Badlion not compatible with Memory Integrity/HVCI
Posted on 17 August 2020 - 11:05 PM
HiPlease update the badlionanticheat.sys driver to ensure it works with HVCI
Here's what I mean:
Incompatible HVCI Kernel Driver Modules found
Module: badlionanticheat.sys
Reason: execute page mapping count: 1
Note that Windows 10 on a clean install turns on Memory Integrity by default since the Windows 10 April 2018 update (which is already discontinued in security updates and Microsoft has already pushed people to newer versions of supported Windows 10 devices), and new devices since 2018 generally have this enabled out of the box too. HVCI/Memory Integrity ensures that the driver is resilient to exploitation due to a security bug (particularly because this is running in kernel and that already introduces a large attack surface)
Posted on 17 August 2020 - 11:30 PM
Also, ensure that Control Flow Guard is also supported. This is another feature designed to make exploitation of the driver harder.Thanks