Differences

This shows you the differences between two versions of the page.

--- windows:exploit_protection [2021/08/29 10:41] – Sean Rhone
+++ windows:exploit_protection [2021/10/10 13:02] – Sean Rhone
@@ Line 1: / Line 1: @@
-<code>
-Set-ProcessMitigation -PolicyFilePath Settings.xml</code>
+====== AMD Graphics ======
 <code>
 <?xml version="1.0" encoding="UTF-8"?>
 <MitigationPolicy>
-  <SystemConfig>
+  <AppConfig Executable="AMDRSServ.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
     <SEHOP Enable="false" TelemetryOnly="false" />
     <Heap TerminateOnError="false" />
-  </SystemConfig>
+    <ChildProcess DisallowChildProcessCreation="false" />
-  <AppConfig Executable="AI.exe">
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="atieclxx.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 21: / Line 31: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 29: / Line 39: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="amdrsserv.exe">
+  <AppConfig Executable="RadeonSoftware.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 46: / Line 56: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="amtrucks.exe">
+  <AppConfig Executable="amdow.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 55: / Line 65: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 63: / Line 73: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="AoE2DE_s.exe">
+  <AppConfig Executable="AMDRSSrcExt.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 72: / Line 82: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 80: / Line 90: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="applemobiledeviceservice.exe">
+  <AppConfig Executable="cncmd.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 97: / Line 107: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="atieclxx.exe">
+  <AppConfig Executable="QtWebEngineProcess.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 114: / Line 124: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="amdfendrsr.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== Built-in Applications ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="audiodg.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
@@ Line 131: / Line 165: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Beat Saber.exe">
+  <AppConfig Executable="ctfmon.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 140: / Line 174: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 148: / Line 182: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="BladeAndSorcery.exe">
+  <AppConfig Executable="dwm.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 157: / Line 191: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 165: / Line 199: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Diablo III64.exe">
+  <AppConfig Executable="explorer.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 174: / Line 208: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 182: / Line 216: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="DJMAX RESPECT V.exe">
+  <AppConfig Executable="lsass.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 191: / Line 225: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 199: / Line 233: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="DOOMEternalx64vk.exe">
+  <AppConfig Executable="ntoskrnl.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 208: / Line 242: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 216: / Line 250: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="dota2.exe">
+  <AppConfig Executable="svchost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 225: / Line 259: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 233: / Line 267: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="dwm.exe">
+  <AppConfig Executable="TiWorker.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 242: / Line 276: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 250: / Line 284: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="explorer.exe">
+  <AppConfig Executable="WUDFHost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 259: / Line 293: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 267: / Line 301: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ffxv_s.exe">
+  <AppConfig Executable="ApplicationFrameHost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 276: / Line 310: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 284: / Line 318: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="dllhost.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="winlogon.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="csrss.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="wininit.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="fontdrvhost.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="dasHost.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="smss.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="services.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== Firefox ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="firefox.exe">
     <DEP Enable="true" EmulateAtlThunks="false" />
-    <ASLR ForceRelocateImages="true" RequireInfo="true" BottomUp="true" HighEntropy="true" />
+    <ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
     <StrictHandle Enable="true" />
     <SystemCalls DisableWin32kSystemCalls="false" />
-    <ExtensionPoints DisableExtensionPoints="false" />
+    <ExtensionPoints DisableExtensionPoints="true" />
     <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
     <ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="true" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="true" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
-    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
     <SEHOP Enable="true" TelemetryOnly="false" />
@@ Line 301: / Line 478: @@
     <UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
   </AppConfig>
-  <AppConfig Executable="Game.exe">
+</MitigationPolicy></code>
+====== Games ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
+  <AppConfig Executable="Gw2-64.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 310: / Line 495: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 318: / Line 503: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Gw2-64.exe">
+  <AppConfig Executable="starwarssquadrons.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 327: / Line 512: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="D2R.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Clone Hero.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="amtrucks.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="AoE2DE_s.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Beat Saber.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="starter.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="DJMAX RESPECT V.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="ZFGameBrowser.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="dota2.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Melvor Idle.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="pCARS3.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 344: / Line 716: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 352: / Line 724: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="HorizonZeroDawn.exe">
+  <AppConfig Executable="BladeAndSorcery.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 361: / Line 733: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 369: / Line 741: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Incursion-Win64-Shipping.exe">
+  <AppConfig Executable="AI.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 378: / Line 750: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 386: / Line 758: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="LatMon.exe">
+  <AppConfig Executable="Crimsonland-D3D11.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 403: / Line 775: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="MonsterHunterWorld.exe">
+  <AppConfig Executable="DOOMEternalx64vk.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 412: / Line 784: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 420: / Line 792: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ntoskrnl.exe">
+  <AppConfig Executable="GTAIV.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 437: / Line 809: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="SkyrimVR.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="TheForestVR.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== Oculus ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="OculusClient.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
@@ Line 446: / Line 860: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 454: / Line 868: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="OculusDash.exe">
+  <AppConfig Executable="Home2.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 463: / Line 877: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Home2-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 497: / Line 928: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 505: / Line 936: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ovrservicelauncher.exe">
+  <AppConfig Executable="OVRServiceLauncher.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 522: / Line 953: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="pCARS3.exe">
+  <AppConfig Executable="OculusSetup.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 531: / Line 962: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 539: / Line 970: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="radeonsoftware.exe">
+  <AppConfig Executable="OVRLibrarian.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 556: / Line 987: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="rtkauduservice64.exe">
+  <AppConfig Executable="OVRLibraryService.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 573: / Line 1004: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="searchapp.exe">
+  <AppConfig Executable="oculus-driver.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 590: / Line 1021: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="shellexperiencehost.exe">
+  <AppConfig Executable="CompatToolCommandLine.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 607: / Line 1038: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="SkyrimVR.exe">
+  <AppConfig Executable="OculusCompatCheck.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 616: / Line 1047: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 624: / Line 1055: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="starter.exe">
+  <AppConfig Executable="OVRRedistributableInstaller.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 633: / Line 1064: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 641: / Line 1072: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="starwarssquadrons.exe">
+  <AppConfig Executable="OculusDebugTool.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 650: / Line 1081: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 658: / Line 1089: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="steam.exe">
+  <AppConfig Executable="Fixer.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 675: / Line 1106: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="steamwebhelper.exe">
+  <AppConfig Executable="OculusVRCValidator.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 692: / Line 1123: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="svchost.exe">
+  <AppConfig Executable="OculusLogGatherer.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 709: / Line 1140: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="textinputhost.exe">
+  <AppConfig Executable="CameraTool.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 726: / Line 1157: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="TheForestVR.exe">
+  <AppConfig Executable="OculusMirror.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 735: / Line 1166: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 743: / Line 1174: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="vrcompositor.exe">
+  <AppConfig Executable="OculusDebugToolCLI.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 752: / Line 1183: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 760: / Line 1191: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="oculus-overlays.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Dreamdeck.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Dreamdeck-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="TouchNUX.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="TouchNUX-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="MontereySetup.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="MontereySetup-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="OculusDash.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="oculus-platform-runtime.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="UnrealCEFSubProcess.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== SteamVR ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="vrserver.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
@@ Line 769: / Line 1378: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 777: / Line 1386: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="vrservice.exe">
+  <AppConfig Executable="vrmonitor.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 786: / Line 1395: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 794: / Line 1403: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Wow.exe">
+  <AppConfig Executable="vrwebhelper.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 803: / Line 1412: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 811: / Line 1420: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ZFGameBrowser.exe">
+  <AppConfig Executable="vrcompositor.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="vrdashboard.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 829: / Line 1455: @@
   </AppConfig>
 </MitigationPolicy></code>
+====== System-wide ======
+<code>Set-ProcessMitigation -PolicyFilePath "System-wide.xml"</code>
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
+  <SystemConfig>
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </SystemConfig>
+</MitigationPolicy></code>