Where is the log of the blue screen caused by Exploit Protection of Windows Secutiry

noel lapin 306 Reputation points
2021-02-12T06:22:40.483+00:00

This is not urgent.

Since I enabled the Exploit Protection of Windows Security (Windows 10 Home 20H2), I experienced the blue screen sometimes. It happens when running programs or just after sign-in. As for programs, I can add the program to the exception list. But for the blue screen just after signing in, I cannot decipher. The blue screen shows the cause like BAD_POOL_CALLER, but "by what?" The blue screen soon restarts Windows automatically and I cannot remember its details. It cannot be reproduced, a rare case, so it is not an urgent problem.

Where is the log of the blue screen?
I appreciate any suggestions.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,807 questions
0 comments No comments
{count} votes

Accepted answer
  1. Molly Lu 761 Reputation points Microsoft Vendor
    2021-02-12T08:34:48.697+00:00

    Hi noellapin,

    Welcome to Microsoft Q&A.

    Please check if there is Event ID 1001, please note the time point when the problem occurred. You can find the dump file under C:\Windows\MEMORY.DMP , and below is the steps of analyzing the dump file:
    https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/analyzing-a-kernel-mode-dump-file-with-windbg

    Usually, unexplained reboots are caused by the following.

    Unstable hardware devices, expired device drivers, interference from three-party programs, and system abnormalities.

    Has any special operation been done during this time? For example, certain drivers were installed, certain patches were updated/certain software was installed. It is recommended that you can undo the previous changes step by step.

    Best regards,
    Molly

    --------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. noel lapin 306 Reputation points
    2021-02-13T15:17:19.65+00:00

    Thank you for your helpful explanation.

    0 comments No comments