This script queries the LSA registry keys (Authentication Packages, Notification Packages, Security Packages) on localhost or specified remote computers and checks the signature of each configured DLL. It reports any DLLs that are not properly signed by a trusted publisher. Also checks OSConfig\Security Packages, LSA Protection (RunAsPPL), and DLL ... More info

This script sets the Windows registry values FeatureSettingsOverrideMask and FeatureSettingsOverride under: HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management to mitigate speculative execution vulnerabilities including Spectre, Meltdown, L1TF, MDS, TAA, and Intel Branch History Injection (BHI / CVE-2022-0001). Three mitig... More info