It stops malware etc. From persisting because it catches writes. Basically it kind of mounts an overlayfs over your drive.
You can configure this differently, and iirc the paid donation version has an option to make your user directory private.
I agree that this probably isn't the best default, but that likeöy was a case of not rtfm'ing, andlnot misjudging the risk level. I was confused by this at first too.
Full HyperV VMs are significantly slower to boot and run.
https://docs.microsoft.com/en-us/windows/security/threat-pro...
The WinGet github repository has some scripts to setup and install programs inside.
I mainly use it to test silent install flags when I'm deploying apps or running untrusted things :)
Windows containers gaining RDP is probably the bigger wishlist item, for me. Windows containers with a GUI would make some things extremely trivial and other things much easier.
Don't use browser password saving. I presume a third party app like bitwarden would have been better. though if the browser auto syncs and installs the extension your risk is a little higher.
edit: 2020. Awesome. I remember having to rely on reverse engineering to understand wtf it was doing. Now I can check!
When I was younger I wanted to start a company around automatic sandboxing very similar to Sandboxie, but dealing with Windows Kernel Drivers was miserable. Having something open source to derive inspiration and design from would have been so helpful.
We are working on traditional Windows apps, with an installer (NSIS or Qt) and Sandboxie is a great way to test it. During development, we can't trust that the installer won't leave a ton of crap that will break future installs, and running it under Sandboxie is a simple and effective way of starting with a clean slate every time. Also, by inspecting the content of the sandbox, it is also possible to see what the installer has done exactly and identify what wasn't properly removed during the uninstall so that it can be fixed.
I would never use it for security-sensitive process isolation, like malware analysis. It's safer to use a dedicated computer or virtual machine for that sort of thing. But for gaming? chef's kiss
