Skip to content

Commit

Permalink
Updated cheat sheet: Removed EMET and added new recommendations. (#1602)
Browse files Browse the repository at this point in the history
  • Loading branch information
caffeine-rohit authored Feb 2, 2025
1 parent 7224e93 commit aa6907b
Show file tree
Hide file tree
Showing 2 changed files with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions cheatsheets/C-Based_Toolchain_Hardening_Cheat_Sheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -648,6 +648,10 @@ Visual Studio offers a number of debugging aids for use during development. The
![Windows1](../assets/C-Based_Toolchain_Hardening_Windows1.png)
Finally, for runtime hardening, Microsoft has a helpful tool called EMET. EMET is the [Enhanced Mitigation Experience Toolkit](https://en.wikipedia.org/wiki/Enhanced_Mitigation_Experience_Toolkit), and allows you to apply runtime hardening to an executable which was built without it. It's very useful for utilities and other programs that were built without an SDLC.
Finally, for runtime hardening, Microsoft provides **Windows Defender Exploit Guard** and the **Process Mitigation Management Tool**.
[Windows Defender Exploit Guard](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/exploit-protection) replaces EMET and offers advanced exploit protection features.
![Windows2](../assets/C-Based_Toolchain_Hardening_Windows2.png)
Additionally, the [Process Mitigation Management Tool](https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/customize-exploit-protection) (`ProcessMitigations` module) allows administrators to configure exploit mitigation policies via PowerShell and Group Policy.
![Windows2](exploit-protection-guard.png)
Binary file added exploit-protection-guard.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit aa6907b

Please sign in to comment.