Windows 10: Code Integrity

I run SentinelOne as my EDR, however, I keep getting the below error on my syslog server. I reached out to SentinelOne and they say, many of their customers have complained about this, but they have no work around as it is Microsoft related issue. Can someone help me resolve this so I doesnt keep getting logged, if it is not something to worry about?Regards,11-14-2024 20:21:58 User.Error DESKTOP-*********** Nov 14 22:21:58 DESKTOP-*********.internal MSWinEventLog 3 Microsoft-Windows-CodeIntegrity/Operational 798988 Thu Nov 14 22:21:53 2024 3033 Microsoft-Windows-CodeIntegrity S-1

:)

 

Code Integrity and Cryptographic problems

Hello,

Thank you for posting the query on Microsoft Community. I am glad to assist you on this.

The Code Integrity component of Windows enforces the requirement that kernel-mode drivers be signed in order to load. Windows always generate Code Integrity operational events and optionally will generate additional system audit events and verbose diagnostic
events that provide information about the status of driver signing.

The Code Integrity operational log includes warning events that indicate that a kernel-mode driver failed to load because the driver signature could not be verified. Signature verification can fail for the following reasons:

• An administrator preinstalled an unsigned driver, but Code Integrity subsequently blocked loading the unsigned driver.
• The driver is signed, but the signature is invalid because the driver file has been altered.
  
• The system disk device might have device errors when reading the file for the driver from bad disk sectors.
  

For more information, I suggest you to refer the below Microsoft article and check if it helps.

Code Integrity Diagnostic System Log Events - Windows drivers

You can try the below steps and check if it helps.

• 
  Open the Task manager. Here’s a tip: Press
  CTRL+Shift+ESC.
  
• 
  Click File > Run New Task.
  
• 
  Make sure you have a check mark beside “Create this task with administrative privileges”.
  
• 
  Type CMD.
  
• 
  Type the following 4 commands at the CMD prompt:
  
  dism /online /cleanup-image /restorehealth
  
  sfc /scannow
  
  powershell
  
  Get-AppXPackage -AllUsers |Where-Object {$_.InstallLocation -like "*SystemApps*"} | Foreach {Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml"}
  
  
  
• 
  Close the CMD window.
  

Kindly let us know if you need any further assistance with Windows. We are glad to assist you.

Thank you.

 

unable to turn on memory integrity

unable to turn on memory integrity and it suggests a incompatible driver but no driver is listed as incompatible

 

Non-zero Code Integrity statistic found: "Section Alignment Failures =8" and "Execute-Write Section Count=1"