Can antivirus sandboxes isolate driver code?

Question

Antivirus

Can antivirus sandboxes isolate driver code?

Answer 1

No. There is no mention of isolation.
Theoretically, this is possible, but it will be slow, unstable and unprofitable.
Fighting at the same level of privilege with the enemy, security tools always lose. If the malicious code is already in ring0, it's gone.
The solution is to go down a level and put security in the hypervisor. But that's a completely different story.