How to find which app is using an incompatible driver?

Use the driver name shown in Windows Security > Device security > Core isolation details as the starting point. Windows states that the driver name and company name shown in that notification are the most reliable identifiers available.

To find the app tied to that driver:

1. Open Windows Security.
2. Go to Device security > Core isolation details.
3. Review the incompatible driver entry and note the driver name and company name.
4. Check the device or app manufacturer for an updated driver.
5. If no compatible driver is available, remove the device or app that uses that incompatible driver.

If the app is not obvious from the driver name, these supported clues help narrow it down:

• The company name in the Memory integrity notification often identifies the vendor.
• In some cases, Windows provides Review incompatible drivers so the incompatible drivers can be listed directly.
• If Memory integrity shows a specific driver such as a vendor driver, the related app is typically the software package that installed that driver.

Examples called out in Microsoft content include apps such as:

• anti-cheat software for games
• third-party input methods
• third-party banking password protection apps

If the goal is to turn Memory integrity back on, the recommended order is:

1. Update the driver from Windows Update or the driver manufacturer.
2. If no update exists, remove the related app or device.
3. As a last resort, turn Memory integrity off. This reduces device security, and on a Secured-core PC it removes the device from a Secured-core state.

• Device Security in the Windows Security App | Microsoft Support
• Windows 11
• Kernel Mode Hardware-enforced Stack Protection
• Driver compatibility with memory integrity and VBS