• https://learn.microsoft.com/en-us/defender-endpoint/exploit-protection-reference

EpicGamesLauncher.exe

• Arbitrary code guard (ACG): On
  • [ ] Allow thread opt-out
• Block low integrity images: On
• Block remote images: On
• Block untrusted fonts: On
• Control integrity guard: On
  • [ ] Also allow loading of images signed by Microsoft Store
• Control flow guard (CFG): On
  • [ ] Use strict CFG
• Data Execution Prevention (DEP): On
  • [ ] Enable ATL thunk emulation
• Disable extension points: On
• Disable Win32k system calls: Off
• Do not allow child processes: Off
• Export address filtering (EAF): On
  • [x] Validate access for modules that are commonly abused by exploits.
• Force randomization for images (Mandatory ASLR): On
  • [x] Do not allow stripped images
• Hardware-enforced Stack Protection: On
  • [x] Enforce for all modules instead of only compatible modules
• Import address filtering (IAF): On
• Randomize memory allocations (Bottom-up ASLR): On
  • [ ] Don't use high entropy
• Simulate execution (SimExec): On
• Validate API invocation (CallerCheck): On
• Validate exception chains (SEHOP): On
• Validate handle usage: On
• Validate heap integrity: On
• Validate image dependency integrity: On
• Validate stack integrity (StackPivot): On