perfmon says that 'Kernel Current URIs Cached = 2 (average) and that 'Output Cache Current Items' = 3000-4000 (average) I think that this means that almost all of the objects are in the User Mode ...
Following the massive Windows outage in July caused by a defective CrowdStrike update, Microsoft is working on a way to allow security products to ‘run in user mode just as apps do,’ Microsoft’s David ...