Microsoft enables zero-trust security through three applications that work together to create a secure fabric. Those applications are Microsoft Defender, Microsoft Entra and Microsoft Intune.

Application Control helps determine the trustworthiness of each app instead of assuming an overall trust on the system apps, therefore greatly reducing system attacks, especially via executive files.