Also, consider prohibiting the installation of any unsigned drivers. Installation of malicious drivers is a favorite method of placing kernel malware on target systems.

• 此外,安装无标注的驱动程序。安装恶意驱动程序是在目标系统中放置内核级恶意软件的最受欢迎的方法。