is a modified, bootable Windows Preinstallation Environment (WinPE) designed by independent developers for system deployment, data recovery, and IT troubleshooting. It packages a lightweight version of Windows with a suite of built-in diagnostic tools, antivirus scanners, and disk management utilities.
Regarding the keywords you mentioned:
Because the host operating system isn't running, rootkits and persistent malware cannot hide or defend themselves.