• brianorca@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      ·
      3 months ago

      It’s a third party kernel module, which Microsoft would love to be able to block, but legally can’t. It’s technically possible to write a virus scanner that runs in user space instead of the kernel, but it’s easier to make sure everything gets scanned if it’s in the kernel.