Security & authentication

Tokens, ACLs, UAC and the Security Reference Monitor that checks every access above — plus LSASS, Kerberos/NTLM and the crypto plumbing behind logon. The diagram's "Security" box in the Integral subsystems.

1. 1Security
2. 2Access tokens
3. 3Security descriptors & ACLs
4. 4UAC, integrity levels, and the secure desktop
5. 5Privileges (Se*)
6. 6Access checks & the Security Reference Monitor
7. 7AppContainers & capabilities
8. 8LSASS, SAM, and local security policy
9. 9Kerberos, NTLM, and authentication packages
10. 10CNG, Schannel & crypto plumbing
11. 11Protected Processes & PPL
12. 12Exploit mitigations (CFG, ACG, ASLR, CIG)
13. 13Application control: AppLocker & SRP
14. 14Kernel Patch Protection (PatchGuard) & HyperGuard