Does SecurityServicesRunning impact the well functioning of EDR?

Question

Hi,

Can you please let me know if VBS status 2 is sufficient to run Bitdefender Customer securely?

I have SVM and AMD-PSP enabled in BIOS.

I have the following settings on Win 11 Pro:

PS C:\WINDOWS\system32> Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard

AvailableSecurityProperties                  : {1, 2, 3, 5...}
CodeIntegrityPolicyEnforcementStatus         : 2
InstanceIdentifier                           : 4ff40742-2649-41b8-bdd1-e80fad1cce80
RequiredSecurityProperties                   : {1, 2, 3}
SecurityFeaturesEnabled                      : {0}
SecurityServicesConfigured                   : {2, 3}
SecurityServicesRunning                      : {2}
SmmIsolationLevel                            : 0
UsermodeCodeIntegrityPolicyEnforcementStatus : 0
Version                                      : 1.0
VirtualizationBasedSecurityStatus            : 2
VirtualMachineIsolation                      : False
VirtualMachineIsolationProperties            : {0}
PSComputerName                               :

And the following security panel:

Please excuse the Italian, I can provide translation if needed.

With great admiration,

Septimiu

Andrei_S Enterprise · Answer

Hello @Septimiu ,

VBS does the impact the functioning and installation of the security agent Bitdefender Endpoint Security Tools (BEST). I have VBS running on my Windows workstation while BEST is enabled.

Kind Regards,

Andrei