As of build 25915 (latest Preview) all known API based kernel address leaks no longer work unless requested by a process with SeDebugPrivilege (only available to admin processes) https://twitter.com/yarden_shafir/status/1685740223181832193