Protection from changes to Kaspersky Embedded Systems Security registry keys
Kaspersky Embedded Systems Security restricts access to the following registry branches and keys, which facilitates loading of application drivers and services:
The rights to change these registry branches and keys are granted to Local System (SYSTEM) account only. User and Administrator accounts are granted read-only rights.
Protection from changes to the memory of program service parts
To protect program service parts from third-party processes, Kaspersky Embedded Systems Security drivers restrict access to the following executable files:
kavfs.exe
kavfswp.exe
kavfswh.exe
kavfsgt.exe
By default, access to the memory of Kaspersky Embedded Systems Security service parts is restricted for third-party processes.