Those are actually one step, right? Running the commands creates the new registry keys... just want to make sure I did the right thing.
Sent from my iPad using Tapatalk
Go to
Speculation Control Validation PowerShell Script
Download SpeculationControl.zip to a local folder.
Extract the contents to a local folder, for example C:\ADV180002
Run the PowerShell module to validate the protections are enabled or disabled
Start PowerShell, then (using the example above) copy and run the following commands:
Save the current execution policy so it can be reset
PS> $SaveExecutionPolicy = Get-ExecutionPolicy
PS> Set-ExecutionPolicy RemoteSigned -Scope Currentuser
PS> CD C:\ADV180002\SpeculationControl
PS> Import-Module .\SpeculationControl.psd1
PS> Get-SpeculationControlSettings
The output of this PowerShell script will resemble the following.
Speculation control settings for CVE-2017-5715 [branch target injection]
For more information about the output below, please refer to
https://support.microsoft.com/en-in/help/4074629
Hardware support for branch target injection mitigation is present: True
Windows OS support for branch target injection mitigation is present: True
*Windows OS support for branch target injection mitigation is enabled: False
*Windows OS support for branch target injection mitigation is disabled by system policy: True
*Windows OS support for branch target injection mitigation is disabled by absence of hardware support: False
Speculation control settings for CVE-2017-5754 [rogue data cache load]
Hardware requires kernel VA shadowing: True
Windows OS support for kernel VA shadow is present: True
Windows OS support for kernel VA shadow is enabled: True
Windows OS support for PCID performance optimization is enabled: True [not required for security]
* = changed lines
PS> # Reset the execution policy to the original state
PS> Set-ExecutionPolicy $SaveExecutionPolicy -Scope Currentuser
SORRY for the crappy editing... using the FCU OSK = Biggest POS ever.