Episode

Device Guard in Windows Server 2016

See how Device Guard uses Virtualization Based Security to ensure that only allowed binaries can be run on the system. If the app or driver isn't trusted, it can't run.