diff --git a/Group Policies/Computer Configuration/System/Early Launch Antimalware.md b/Group Policies/Computer Configuration/System/Early Launch Antimalware.md
new file mode 100644
index 0000000..bab1992
--- /dev/null
+++ b/Group Policies/Computer Configuration/System/Early Launch Antimalware.md	
@@ -0,0 +1,7 @@
+# Early Launch Antimalware
+
+`Computer Configuration\Administrative Templates\System\Kernel DMA Protection`
+
+Probably doesn't do anything unless you use 3rd party Antimalware with this feature, but there is no harm in enabling it just in case you need it.
+
+- Boot-Start Driver Initialization Policy -> Enabled -> Good only
\ No newline at end of file