Hvci Bypass -

For an attacker, bypassing HVCI is the "Holy Grail." Without a bypass, even with "Kernel Admin" privileges, you cannot: Inject custom shellcode into kernel space. Modify existing system drivers (hooking).

Advanced users sometimes use the Registry Editor to force HVCI off when the UI toggle is greyed out: Hvci Bypass

Or,

HVCI is part of Windows' defense-in-depth approach to security, introduced to make it more difficult for attackers to exploit vulnerabilities and execute malicious code at the kernel level. It leverages hardware virtualization-based security (VBS) to enforce code integrity policies, ensuring that any code attempting to run in kernel mode is validated against a set of allow-listed, signed, and authorized binaries. For an attacker, bypassing HVCI is the "Holy Grail