PROCESS_MITIGATION_POLICY enumeration

Represents the different process mitigation policies.

Syntax


typedef enum _PROCESS_MITIGATION_POLICY { 
  ProcessDEPPolicy                    = 0,
  ProcessASLRPolicy                   = 1,
  ProcessDynamicCodePolicy            = 2,
  ProcessStrictHandleCheckPolicy      = 3,
  ProcessSystemCallDisablePolicy      = 4,
  ProcessMitigationOptionsMask        = 5,
  ProcessExtensionPointDisablePolicy  = 6,
  ProcessControlFlowGuardPolicy       = 7,
  ProcessSignaturePolicy              = 8,
  ProcessFontDisablePolicy            = 9,
  ProcessImageLoadPolicy              = 10,
  MaxProcessMitigationPolicy          = 11
} PROCESS_MITIGATION_POLICY, *PPROCESS_MITIGATION_POLICY;

Constants

ProcessDEPPolicy

The data execution prevention (DEP) policy of the process.

ProcessASLRPolicy

The Address Space Layout Randomization (ASLR) policy of the process.

ProcessDynamicCodePolicy

The policy that turns off the ability of the process to generate dynamic code or modify existing executable code.

ProcessStrictHandleCheckPolicy

The process will receive a fatal error if it manipulates an invalid handle. Useful for preventing downstream problems in a process due to handle misuse.

ProcessSystemCallDisablePolicy

Disables the ability to use NTUser/GDI functions at the lowest layer.

ProcessMitigationOptionsMask

Returns the mask of valid bits for all the mitigation options on the system. An application can set many mitigation options without querying the operating system for mitigation options by combining bitwise with the mask to exclude all non-supported bits at once.

ProcessExtensionPointDisablePolicy

The policy that prevents some built-in third party extension points from being turned on, which prevents legacy extension point DLLs from being loaded into the process.

ProcessControlFlowGuardPolicy

The Control Flow Guard (CFG) policy of the process.

ProcessSignaturePolicy

The policy of a process that can restrict image loading to those images that are either signed by Microsoft, by the Windows Store, or by Microsoft, the Windows Store and the Windows Hardware Quality Labs (WHQL).

ProcessFontDisablePolicy

The policy that turns off the ability of the process to load non-system fonts.

ProcessImageLoadPolicy

The policy that turns off the ability of the process to load images from some locations, such a remote devices or files that have the low mandatory label.

MaxProcessMitigationPolicy

Ends the enumeration.

Requirements

Minimum supported client

Windows 8 [desktop apps only]

Minimum supported server

Windows Server 2012 [desktop apps only]

Header

WinNT.h (include Windows.h)

 

 

Show: