Had a play about with windows defender on the laptop which has a i3 6100U in it with TPM 2.0 enabled and it turns out VBS can be enabled by turning on memory core isolation. This is most likely going to be software based however if DMA is enabled in the bios then core isolation is automatically enabled so it does answer a few questions. Tried it on the main machine but no luck yet. Apparently to do with driver compatibility
OS Name Microsoft Windows 10 Pro
Version 10.0.19043 Build 19043
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Name KCAM002
System Manufacturer HP
System Model HP EliteBook 820 G3
System Type x64-based PC
System SKU L4Q15AV
Processor Intel(R) Core(TM) i3-6100U CPU @ 2.30GHz, 2304 Mhz, 2 Core(s), 4 Logical Processor(s)
BIOS Version/Date HP N75 Ver. 01.52, 20/04/2021
SMBIOS Version 2.7
Embedded Controller Version 133.121
BIOS Mode UEFI
BaseBoard Manufacturer HP
BaseBoard Product 807C
BaseBoard Version KBC Version 85.79
Platform Role Mobile
Secure Boot State On
PCR7 Configuration Bound
Windows Directory C:\WINDOWS
System Directory C:\WINDOWS\system32
Boot Device \Device\HarddiskVolume3
Locale United Kingdom
Hardware Abstraction Layer Version = "10.0.19041.1151"
Username KCAM002\kcam0
Time Zone GMT Summer Time
Installed Physical Memory (RAM) 12.0 GB
Total Physical Memory 11.9 GB
Available Physical Memory 7.47 GB
Total Virtual Memory 13.7 GB
Available Virtual Memory 8.94 GB
Page File Space 1.81 GB
Page File C:\pagefile.sys
Kernel DMA Protection Off
Virtualisation-based security Running
Virtualisation-based security required security properties
Virtualisation-based security available security properties Base Virtualisation Support, Secure Boot, DMA Protection, Secure Memory Overwrite
Virtualisation-based security services configured Hypervisor enforced Code Integrity
Virtualisation-based security services running Hypervisor enforced Code Integrity
Windows Defender Application Control policy Enforced
Windows Defender Application Control user mode policy Off
Device Encryption Support Meets pre-requisites
A hypervisor has been detected. Features required for Hyper-V will not be displayed.