# Early Launch Antimalware

`Computer Configuration\Administrative Templates\System\Kernel DMA Protection`

Probably doesn't do anything unless you use 3rd party Antimalware with this feature, but there is no harm in enabling it just in case you need it.

- Boot-Start Driver Initialization Policy -> Enabled -> Good only