Something new in the latest Windows 11 Preview Build 22567
This can run alongside your third party AV to protect your system.
You'll notice mine is turned off because it can only be turned on for a clean install of Windows 11.
Since this was an upgrade from Windows 10, I'd have to do a clean install inorder to use this feature.
The feature basically enforces signed application usage. If the app (program) doesn't have a valid
signature, it will not be able to run.
There is currently no provision for exclusions. More details available here:
https://www.zdnet.com/article/new-windows-11-test-build-adds-smart-app-control-better-microsoft-365-account-management/