Yes, Windows Defender Application Control (WDAC) can help mitigate these threats. It can block kernel-mode viruses, bootkits, rootkits, and malicious drivers by only allowing trusted applications to run. It's also effective against exploits that use software vulnerabilities. WDAC+ISG, when properly configured, can provide robust protection against these attacks.