|
1 | 1 | <?xml version="1.0" encoding="UTF-8"?> |
2 | | -<!-- Find the newest update & a script to remove all protection via https://github.com/neohiro/ExploitProtection/ --> |
| 2 | +<!-- Find the updater & a script to remove all protection via https://github.com/neohiro/ExploitProtection/ --> |
| 3 | +<?xml version="1.0" encoding="UTF-8"?> |
3 | 4 | <MitigationPolicy> |
4 | 5 | <SystemConfig> |
5 | 6 | <DEP Enable="true" EmulateAtlThunks="false" /> |
|
143 | 144 | <AppConfig Executable="AggregatorHost.exe"> |
144 | 145 | <DEP Enable="true" EmulateAtlThunks="false" /> |
145 | 146 | <ASLR ForceRelocateImages="true" RequireInfo="false" BottomUp="true" HighEntropy="true" /> |
| 147 | + <StrictHandle Enable="true" /> |
146 | 148 | <DynamicCode BlockDynamicCode="true" AllowThreadsToOptOut="false" Audit="false" /> |
147 | 149 | <ControlFlowGuard Enable="true" SuppressExports="false" /> |
148 | 150 | <SignedBinaries MicrosoftSignedOnly="true" AllowStoreSignedBinaries="false" Audit="false" AuditStoreSigned="false" /> |
|
1405 | 1407 | <SEHOP Enable="true" TelemetryOnly="false" /> |
1406 | 1408 | <Heap TerminateOnError="true" /> |
1407 | 1409 | </AppConfig> |
| 1410 | + <AppConfig Executable="openvpn.exe"> |
| 1411 | + <DEP Enable="true" EmulateAtlThunks="false" /> |
| 1412 | + <ASLR ForceRelocateImages="true" RequireInfo="true" BottomUp="true" HighEntropy="true" /> |
| 1413 | + <StrictHandle Enable="true" /> |
| 1414 | + <ControlFlowGuard Enable="true" SuppressExports="false" /> |
| 1415 | + <Fonts DisableNonSystemFonts="true" AuditOnly="false" Audit="false" /> |
| 1416 | + <ImageLoad BlockRemoteImageLoads="true" AuditRemoteImageLoads="false" BlockLowLabelImageLoads="true" AuditLowLabelImageLoads="false" /> |
| 1417 | + <Payload EnableExportAddressFilter="true" AuditEnableExportAddressFilter="false" EnableExportAddressFilterPlus="true" AuditEnableExportAddressFilterPlus="false" EnableImportAddressFilter="true" AuditEnableImportAddressFilter="false" EnableRopCallerCheck="true" AuditEnableRopCallerCheck="false" EnableRopSimExec="true" AuditEnableRopSimExec="false" /> |
| 1418 | + <SEHOP Enable="true" TelemetryOnly="false" /> |
| 1419 | + <Heap TerminateOnError="true" /> |
| 1420 | + <UserShadowStack UserShadowStack="true" UserShadowStackStrictMode="false" AuditUserShadowStack="false" /> |
| 1421 | + </AppConfig> |
1408 | 1422 | <AppConfig Executable="opera.exe"> |
1409 | 1423 | <DEP Enable="true" EmulateAtlThunks="false" /> |
1410 | 1424 | <ASLR ForceRelocateImages="true" RequireInfo="true" BottomUp="true" HighEntropy="true" /> |
|
0 commit comments