Windows can protect itself from exploits – but you need to turn it on! Richard talks to Chris Jackson about his recently published document about exploit protection. Chris talks about the long list of mitigation strategies that exist inside of Windows to stop arbitrary code (read: malware) from executing. Each strategy comes with the risk of breaking your application. You need to apply the mitigations on an application-by-application basis, and with some testing around it. But if you want to make your Windows desktops more secure, these exploit protections are enormous!

Links:

• Enable Exploit Protection
• Microsoft Security Baselines
• Image File Execution Options
• Enable Code Integrity
• Microsoft Defender Advanced Threat Protection
• AppCompat Shims
• Exploit Protection Reference