Windows Defender Credential Guard

Product

Credential Guard uses virtualization-based security to isolate secrets such as NTLM hashes and Kerberos tickets from the LSASS process memory.

Title graphic: Windows Defender Credential Guard (Product)

Type	Product
Documentation	learn.microsoft.com/en-nz/windows/security/identity-protection/credential-guard

Episodes about Windows Defender Credential Guard

How Ransomware Moves Through Active Directory

2025-12-21 · Video on YouTube

Security drift in Active Directory and Azure AD isn’t a single bug — it’s the slow, invisible decay of identity, permissions, and governance posture that happens when environments aren’t routinely managed and remediated. Over time, this drift increases risk…

Glossary

Community wiki

Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.

Experts and companies for this topic

Nobody has listed this topic yet. Add it to your profile.

Sources

Documentation: learn.microsoft.com/en-nz/windows/security/identity-protection/credential-guard
Feed for this topic (RSS): entity/credential-guard/feed.xml
M365.FM episodes on this topic: 1

Maintained by Mirko Peters (Microsoft MVP) · Last updated: 2026-11-03