diff --git a/Group Policies/Computer Configuration/Kernel DMA Protection.md b/Group Policies/Computer Configuration/Kernel DMA Protection.md
new file mode 100644
index 0000000..b2b3589
--- /dev/null
+++ b/Group Policies/Computer Configuration/Kernel DMA Protection.md	
@@ -0,0 +1,5 @@
+# Kernel DMA Protection
+
+`Computer Configuration\Administrative Templates\System\Kernel DMA Protection`
+
+Enumeration policy for external devices incompatible with Kernel DMA Protection -> Enabled -> Block all
\ No newline at end of file