• brianorca@lemmy.world
    link
    fedilink
    English
    arrow-up
    18
    ·
    3 months ago

    It’s a third party kernel module, which Microsoft would love to be able to block, but legally can’t. It’s technically possible to write a virus scanner that runs in user space instead of the kernel, but it’s easier to make sure everything gets scanned if it’s in the kernel.