Microsoft calls it Windows Baseline Security Mode. It turns integrity safeguards on by default, so signed apps, services, and drivers are the ones that run. If something is unsigned, Windows can stop it. You can still approve exceptions when you need to keep a legitimate tool working. Microsoft is also pushing User Transparency and Consent. Windows will start prompting you when an app reaches for device or data access, and when an installer tries to add extra software you didn’t ask for....
