sandbox

A secure, isolated desktop environment to run untrusted software without risking host system integrity.

Sandboxing isolates active processes and untrusted code within a restricted virtual boundary, preventing malicious software from accessing host system files or local network resources. In enterprise security, tools like Windows Sandbox spin up lightweight, disposable virtual machines using hardware-based virtualization (Hyper-V technology) to execute suspicious files or test new applications. Once the user closes the session, the entire environment is permanently discarded: all generated files, registry changes, and temporary data are wiped in milliseconds, leaving zero footprint on the physical machine.

https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-overview