(Source: TechTarget) Credential Guard uses VBS to isolate sensitive data and make it available to only privileged system software. Another security feature is Smart App Control.