Windows 10: BSOD mitigation

My pc started Blue screening today and after eventually removing 3/4 of my RAM sticks it seems stable but wanted to get some eyes on a few dumps for clarification as IO've been having intermittent problems for a few weeks now.

:)

 

KB5005413: Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)

Hello,

KB5005413: Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)

In order to mitigate the above vulnerability MS has given some steps to perform.

we have Certificate Authority Web Enrollment installed in our server and to mitigate the issue we had performed step 1 mentioned under primary mitigation. once the mitigation is completed I was checking in the registry that it stores any data about it but could not find any.

Can anyone please help me to understand after performing the mitigation steps, does machine registry stores any value/data ?

 

Random BSOD while browsing internet


BitDefender is nothing special. mwac.sys causes BSODs anywhere.
A tiny documentation can be found here: Solved Random BSODs - Windows 10 Forums
In that very thread, the suggested action apparently worked.

The storage and network filters of any third party antivirus can cause BSODs. Neither MBAM nor BitDefender is any special. For a regular antivirus, it may be shifted to an alternative; but MBAM has no alternative. So a clean install of the said program is the most feasible first step.
As far as the first step is not failing, it is better to not think for the second step. Because the BSODs are not universal, failure at the first step is not universal; and success at the second step is also not universal.
That is why I posted that my suggestion may work, or may not. Let us see where it goes.

 

Mitigation not enabled

Windows OS support for branch target injection mitigation is enabled: False

Windows OS support for branch target injection mitigation is disabled by system policy: False

Windows OS support for branch target injection mitigation is disabled by absence of hardware support: False

BTIWindowsSupportEnabled : False

BTIDisabledBySystemPolicy : False

BTIDisabledByNoHardwareSupport : False

So what I can gather by this is that the system mitigation is disabled, however not by policy or absense of hardware, so in a nutshell, windows doesn't want to enable it for some unknown reasons. Unlike others who have the mitigation disabled due to absense
of hardware support mine is apparently completely software related.

So I'll ask you guys, how do I enable the protection?

Hardware support for branch target injection mitigation is present: True

Windows OS support for branch target injection mitigation is present: True

As you can see both hardware and software support it.