Thanks for continuing to support the 32 bit version even though sales are dead Will 3.25 also support ASLR? Defensewall, compared to SB 64 bits, allows sandboxed/untrusted processes to run with higher privileges, which means you can for example install software as completely untrusted(unless they need drivers and such.) So DW needs to hook the kernel to have higher privileges so it can control the untrusted processes. So you can try to bypass PatchGuard to keep these privileges, but if MS releases a patch it would cause tons of troubles for DW users. Or you can restrict the untrusted processes' to a lower privilege level so you're still the one with the highest privileges, even if these are not kernel. That's what Sandboxie did afaik. That will make DW more limited though, and since DW's protection model is different than SB it also might cause more problems, so going down this road would require more time and effort. Since Ilya doesn't get revenue from DW sales anymore, I don't see that happening.