windows:exploit_protection
This is an old revision of the document!
Settings.xml
<?xml version="1.0" encoding="UTF-8"?> <MitigationPolicy> <SystemConfig> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> </SystemConfig> <AppConfig Executable="ExtExport.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="ie4uinit.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="ieinstal.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="ielowutil.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="ieUnatt.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="mscorsvw.exe"> <ExtensionPoints DisableExtensionPoints="true" /> </AppConfig> <AppConfig Executable="msfeedssync.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="mshta.exe"> <ASLR ForceRelocateImages="true" RequireInfo="false" /> </AppConfig> <AppConfig Executable="ngen.exe"> <ExtensionPoints DisableExtensionPoints="true" /> </AppConfig> <AppConfig Executable="ngentask.exe"> <ExtensionPoints DisableExtensionPoints="true" /> </AppConfig> <AppConfig Executable="PresentationHost.exe"> <DEP Enable="true" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" /> <SEHOP Enable="true" TelemetryOnly="false" /> <Heap TerminateOnError="true" /> </AppConfig> <AppConfig Executable="PrintDialog.exe"> <ExtensionPoints DisableExtensionPoints="true" /> </AppConfig> <AppConfig Executable="runtimebroker.exe"> <ExtensionPoints DisableExtensionPoints="true" /> </AppConfig> <AppConfig Executable="SystemSettings.exe"> <ExtensionPoints DisableExtensionPoints="true" /> </AppConfig> <AppConfig Executable="OculusDash.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="OVRServer_x64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="OculusClient.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="explorer.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="dwm.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="starwarssquadrons.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="starter.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="pCARS3.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Gw2-64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Game.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="DOOMEternalx64vk.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="hlvr.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="BladeAndSorcery.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="amtrucks.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Beat Saber.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Diablo III64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="SkyrimVR.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Wow.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="AoE2DE_s.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="DJMAX RESPECT V.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="dota2.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="ffxv_s.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="HorizonZeroDawn.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="MonsterHunterWorld.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="TheForestVR.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="AI.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Incursion-Win64-Shipping.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="vrcompositor.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="vrserver.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="vrservice.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> </MitigationPolicy>
/var/www/wiki/data/attic/windows/exploit_protection.1630018155.txt.gz · Last modified: 2021/08/26 18:49 by Sean Rhone