User Tools

Site Tools


windows:exploit_protection

This is an old revision of the document!


Settings.xml

Set-ProcessMitigation -PolicyFilePath Settings.xml
<?xml version="1.0" encoding="UTF-8"?>
<MitigationPolicy>
  <SystemConfig>
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
  </SystemConfig>
  <AppConfig Executable="ExtExport.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="ie4uinit.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="ieinstal.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="ielowutil.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="ieUnatt.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="mscorsvw.exe">
    <ExtensionPoints DisableExtensionPoints="true" />
  </AppConfig>
  <AppConfig Executable="msfeedssync.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="mshta.exe">
    <ASLR ForceRelocateImages="true" RequireInfo="false" />
  </AppConfig>
  <AppConfig Executable="ngen.exe">
    <ExtensionPoints DisableExtensionPoints="true" />
  </AppConfig>
  <AppConfig Executable="ngentask.exe">
    <ExtensionPoints DisableExtensionPoints="true" />
  </AppConfig>
  <AppConfig Executable="PresentationHost.exe">
    <DEP Enable="true" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
    <SEHOP Enable="true" TelemetryOnly="false" />
    <Heap TerminateOnError="true" />
  </AppConfig>
  <AppConfig Executable="PrintDialog.exe">
    <ExtensionPoints DisableExtensionPoints="true" />
  </AppConfig>
  <AppConfig Executable="runtimebroker.exe">
    <ExtensionPoints DisableExtensionPoints="true" />
  </AppConfig>
  <AppConfig Executable="SystemSettings.exe">
    <ExtensionPoints DisableExtensionPoints="true" />
  </AppConfig>
  <AppConfig Executable="OculusDash.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="OVRServer_x64.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="OculusClient.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="explorer.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="dwm.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="starwarssquadrons.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="starter.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="pCARS3.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="Gw2-64.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="Game.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="DOOMEternalx64vk.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="hlvr.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="BladeAndSorcery.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="amtrucks.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="Beat Saber.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="Diablo III64.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="SkyrimVR.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="Wow.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="AoE2DE_s.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="DJMAX RESPECT V.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="dota2.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="ffxv_s.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="HorizonZeroDawn.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="MonsterHunterWorld.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="TheForestVR.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="AI.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="Incursion-Win64-Shipping.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="vrcompositor.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="vrserver.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
  <AppConfig Executable="vrservice.exe">
    <DEP Enable="false" EmulateAtlThunks="false" />
    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
    <StrictHandle Enable="false" />
    <SystemCalls DisableWin32kSystemCalls="false" />
    <ExtensionPoints DisableExtensionPoints="false" />
    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
    <SEHOP Enable="false" TelemetryOnly="false" />
    <Heap TerminateOnError="false" />
    <ChildProcess DisallowChildProcessCreation="false" />
    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
  </AppConfig>
</MitigationPolicy>
/var/www/wiki/data/attic/windows/exploit_protection.1630018495.txt.gz · Last modified: 2021/08/26 18:54 by Sean Rhone