Windows Defender Advanced Threat Protection for Windows 10 in the Creators Update

With the Creators Update, Microsoft will expand Windows Defender ATP sensors to detect threats that persist only in memory or kernel level exploits. This will enable IT administrators to monitor loaded drivers and in-memory activities, and to detect various patterns of injection, reflective loading, and in-memory modifications indicating potential kernel exploits.