Differences

This shows you the differences between two versions of the page.

--- windows:exploit_protection [2021/09/01 02:57] – Sean Rhone
+++ windows:exploit_protection [2021/10/10 13:04] (current) – Sean Rhone
@@ Line 1: / Line 1: @@
-====== Default Exploit Protection ======
+====== AMD Graphics ======
-  * :!: TODO
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
+  <AppConfig Executable="AMDRSServ.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="atieclxx.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="RadeonSoftware.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="amdow.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="AMDRSSrcExt.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="cncmd.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="QtWebEngineProcess.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="amdfendrsr.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
-====== Disable Exploit Protections ======
+====== Built-in Applications ======
-<code>
-Settings.xml</code>
 <code>
 <?xml version="1.0" encoding="UTF-8"?>
 <MitigationPolicy>
-  <SystemConfig>
+  <AppConfig Executable="audiodg.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
     <SEHOP Enable="false" TelemetryOnly="false" />
     <Heap TerminateOnError="false" />
-  </SystemConfig>
+    <ChildProcess DisallowChildProcessCreation="false" />
-  <AppConfig Executable="AI.exe">
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="ctfmon.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 27: / Line 173: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 35: / Line 181: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="amdrsserv.exe">
+  <AppConfig Executable="dwm.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 52: / Line 198: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="amtrucks.exe">
+  <AppConfig Executable="explorer.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 61: / Line 207: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 69: / Line 215: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="AoE2DE_s.exe">
+  <AppConfig Executable="lsass.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 78: / Line 224: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 86: / Line 232: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="applemobiledeviceservice.exe">
+  <AppConfig Executable="ntoskrnl.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 103: / Line 249: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="atieclxx.exe">
+  <AppConfig Executable="svchost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 120: / Line 266: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="audiodg.exe">
+  <AppConfig Executable="TiWorker.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 137: / Line 283: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Beat Saber.exe">
+  <AppConfig Executable="WUDFHost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 146: / Line 292: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 154: / Line 300: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="BladeAndSorcery.exe">
+  <AppConfig Executable="ApplicationFrameHost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 163: / Line 309: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 171: / Line 317: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Diablo III64.exe">
+  <AppConfig Executable="dllhost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 180: / Line 326: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 188: / Line 334: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="DJMAX RESPECT V.exe">
+  <AppConfig Executable="winlogon.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 197: / Line 343: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 205: / Line 351: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="DOOMEternalx64vk.exe">
+  <AppConfig Executable="csrss.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 214: / Line 360: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 222: / Line 368: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="dota2.exe">
+  <AppConfig Executable="wininit.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 231: / Line 377: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 239: / Line 385: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="dwm.exe">
+  <AppConfig Executable="fontdrvhost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 248: / Line 394: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 256: / Line 402: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="explorer.exe">
+  <AppConfig Executable="dasHost.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 265: / Line 411: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 273: / Line 419: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ffxv_s.exe">
+  <AppConfig Executable="smss.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 282: / Line 428: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 290: / Line 436: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="services.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== Firefox ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="firefox.exe">
     <DEP Enable="true" EmulateAtlThunks="false" />
-    <ASLR ForceRelocateImages="true" RequireInfo="true" BottomUp="true" HighEntropy="true" />
+    <ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" />
     <StrictHandle Enable="true" />
     <SystemCalls DisableWin32kSystemCalls="false" />
-    <ExtensionPoints DisableExtensionPoints="false" />
+    <ExtensionPoints DisableExtensionPoints="true" />
     <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
     <ControlFlowGuard Enable="true" SuppressExports="false" StrictControlFlowGuard="true" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="true" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" />
-    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopStackPivot="true" AuditEnableRopStackPivot="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" />
     <SEHOP Enable="true" TelemetryOnly="false" />
@@ Line 307: / Line 477: @@
     <UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="true" AuditUserShadowStack="false" />
   </AppConfig>
-  <AppConfig Executable="Game.exe">
+</MitigationPolicy></code>
+====== Games ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
+  <AppConfig Executable="Gw2-64.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 316: / Line 494: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 324: / Line 502: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Gw2-64.exe">
+  <AppConfig Executable="starwarssquadrons.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 333: / Line 511: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="D2R.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Clone Hero.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="amtrucks.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="AoE2DE_s.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Beat Saber.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="starter.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="DJMAX RESPECT V.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="ZFGameBrowser.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="dota2.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Melvor Idle.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="pCARS3.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 350: / Line 715: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 358: / Line 723: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="HorizonZeroDawn.exe">
+  <AppConfig Executable="BladeAndSorcery.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 367: / Line 732: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 375: / Line 740: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Incursion-Win64-Shipping.exe">
+  <AppConfig Executable="AI.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 384: / Line 749: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 392: / Line 757: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="LatMon.exe">
+  <AppConfig Executable="Crimsonland-D3D11.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 409: / Line 774: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="MonsterHunterWorld.exe">
+  <AppConfig Executable="DOOMEternalx64vk.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 418: / Line 783: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 426: / Line 791: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ntoskrnl.exe">
+  <AppConfig Executable="GTAIV.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 443: / Line 808: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="SkyrimVR.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="TheForestVR.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== Oculus ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="OculusClient.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
@@ Line 452: / Line 859: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 460: / Line 867: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="OculusDash.exe">
+  <AppConfig Executable="Home2.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 469: / Line 876: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Home2-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 503: / Line 927: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 511: / Line 935: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ovrservicelauncher.exe">
+  <AppConfig Executable="OVRServiceLauncher.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 528: / Line 952: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="pCARS3.exe">
+  <AppConfig Executable="OculusSetup.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 537: / Line 961: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 545: / Line 969: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="radeonsoftware.exe">
+  <AppConfig Executable="OVRLibrarian.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 562: / Line 986: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="rtkauduservice64.exe">
+  <AppConfig Executable="OVRLibraryService.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 579: / Line 1003: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="searchapp.exe">
+  <AppConfig Executable="oculus-driver.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 596: / Line 1020: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="shellexperiencehost.exe">
+  <AppConfig Executable="CompatToolCommandLine.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 613: / Line 1037: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="SkyrimVR.exe">
+  <AppConfig Executable="OculusCompatCheck.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 622: / Line 1046: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 630: / Line 1054: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="starter.exe">
+  <AppConfig Executable="OVRRedistributableInstaller.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 639: / Line 1063: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 647: / Line 1071: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="starwarssquadrons.exe">
+  <AppConfig Executable="OculusDebugTool.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 656: / Line 1080: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 664: / Line 1088: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="steam.exe">
+  <AppConfig Executable="Fixer.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 681: / Line 1105: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="steamwebhelper.exe">
+  <AppConfig Executable="OculusVRCValidator.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 698: / Line 1122: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="svchost.exe">
+  <AppConfig Executable="OculusLogGatherer.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 715: / Line 1139: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="textinputhost.exe">
+  <AppConfig Executable="CameraTool.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 732: / Line 1156: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="TheForestVR.exe">
+  <AppConfig Executable="OculusMirror.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 741: / Line 1165: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 749: / Line 1173: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="vrcompositor.exe">
+  <AppConfig Executable="OculusDebugToolCLI.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 758: / Line 1182: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 766: / Line 1190: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
+  <AppConfig Executable="oculus-overlays.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Dreamdeck.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="Dreamdeck-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="TouchNUX.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="TouchNUX-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="MontereySetup.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="MontereySetup-Win64-Shipping.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="OculusDash.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="oculus-platform-runtime.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="UnrealCEFSubProcess.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+</MitigationPolicy></code>
+====== SteamVR ======
+<code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
   <AppConfig Executable="vrserver.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
@@ Line 775: / Line 1377: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 783: / Line 1385: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="vrservice.exe">
+  <AppConfig Executable="vrmonitor.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 792: / Line 1394: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 800: / Line 1402: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="Wow.exe">
+  <AppConfig Executable="vrwebhelper.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 809: / Line 1411: @@
     <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
     <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
-    <Fonts DisableNonSystemFonts="false" AuditOnly="false" Audit="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
     <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
     <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
@@ Line 817: / Line 1419: @@
     <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
   </AppConfig>
-  <AppConfig Executable="ZFGameBrowser.exe">
+  <AppConfig Executable="vrcompositor.exe">
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </AppConfig>
+  <AppConfig Executable="vrdashboard.exe">
     <DEP Enable="false" EmulateAtlThunks="false" />
     <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
@@ Line 836: / Line 1455: @@
 </MitigationPolicy></code>
-===== Apply =====
-****
+====== System-wide ======
+<code>notepad++ %UserProfile%\Desktop\System-wide.xml</code>
+<code>Set-ProcessMitigation -PolicyFilePath "%UserProfile%\Desktop\System-wide.xml"</code>
 <code>
-Set-ProcessMitigation -PolicyFilePath Settings.xml</code>
+<?xml version="1.0" encoding="UTF-8"?>
+<MitigationPolicy>
+  <SystemConfig>
+    <DEP Enable="false" EmulateAtlThunks="false" />
+    <ASLR ForceRelocateImages="false" RequireInfo="false" BottomUp="false" HighEntropy="false" />
+    <StrictHandle Enable="false" />
+    <SystemCalls DisableWin32kSystemCalls="false" />
+    <ExtensionPoints DisableExtensionPoints="false" />
+    <DynamicCode BlockDynamicCode="false" AllowThreadsToOptOut="false" />
+    <ControlFlowGuard Enable="false" SuppressExports="false" StrictControlFlowGuard="false" />
+    <SignedBinaries MicrosoftSignedOnly="false" AllowStoreSignedBinaries="false" EnforceModuleDependencySigning="false" />
+    <Fonts DisableNonSystemFonts="false" AuditOnly="false" />
+    <ImageLoad BlockRemoteImageLoads="false" BlockLowLabelImageLoads="false" />
+    <Payload EnableExportAddressFilter="false" EnableImportAddressFilter="false" EnableRopStackPivot="false" EnableRopCallerCheck="false" EnableRopSimExec="false" />
+    <SEHOP Enable="false" TelemetryOnly="false" />
+    <Heap TerminateOnError="false" />
+    <ChildProcess DisallowChildProcessCreation="false" />
+    <UserShadowStack UserShadowStack="false" UserShadowStackStrictMode="false" />
+  </SystemConfig>
+</MitigationPolicy></code>