windows:exploit_protection
This is an old revision of the document!
Table of Contents
Default Exploit Protection
- TODO
Disable Exploit Protections
Settings.xml
<?xml version="1.0" encoding="UTF-8"?> <MitigationPolicy> <SystemConfig> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> </SystemConfig> <AppConfig Executable="AI.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="amdrsserv.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="amtrucks.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="AoE2DE_s.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="applemobiledeviceservice.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="atieclxx.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="audiodg.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Beat Saber.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="BladeAndSorcery.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Diablo III64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="DJMAX RESPECT V.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="DOOMEternalx64vk.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="dota2.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="dwm.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="explorer.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="ffxv_s.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="firefox.exe"> <DEP Enable="true" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="true" RequireInfo="true" BottomUp="true" HighEntropy="true" /> <StrictHandle Enable="true" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="true" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="true" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" /> <SEHOP Enable="true" TelemetryOnly="false" /> <Heap TerminateOnError="true" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" /> </AppConfig> <AppConfig Executable="Game.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Gw2-64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="hlvr.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="HorizonZeroDawn.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Incursion-Win64-Shipping.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="LatMon.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="MonsterHunterWorld.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="ntoskrnl.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="OculusClient.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="OculusDash.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="OVRRedir.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="OVRServer_x64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="ovrservicelauncher.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="pCARS3.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="radeonsoftware.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="rtkauduservice64.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="searchapp.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="shellexperiencehost.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="SkyrimVR.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="starter.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="starwarssquadrons.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="steam.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="steamwebhelper.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="svchost.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="textinputhost.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="TheForestVR.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="vrcompositor.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="vrserver.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="vrservice.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="Wow.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> <AppConfig Executable="ZFGameBrowser.exe"> <DEP Enable="false" EmulateAtlThunks="false" /> <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" /> <StrictHandle Enable="false" /> <SystemCalls DisableWin32kSystemCalls="false" /> <ExtensionPoints DisableExtensionPoints="false" /> <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" /> <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" /> <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" /> <Fonts DisableNonSystemFonts="false" AuditOnly="false" /> <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" /> <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" /> <SEHOP Enable="false" TelemetryOnly="false" /> <Heap TerminateOnError="false" /> <ChildProcess DisallowChildProcessCreation="false" /> <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" /> </AppConfig> </MitigationPolicy>
Apply
Set-ProcessMitigation -PolicyFilePath Settings.xml
/var/www/wiki/data/attic/windows/exploit_protection.1630479478.txt.gz · Last modified: 2021/09/01 02:57 by Sean Rhone