My next class:

EMET 5.5 Released

Published: 2016-02-03. Last Updated: 2016-02-03 10:26:58 UTC
by Xavier Mertens (Version: 1)
2 comment(s)

Microsoft announced on the TechNet blog the availability of a new version of its EMET tool (EMET stands for "Enhanced Mitigation Experience Toolkit"). The purpose of this tool is to implement extrat security controls to prevent common vulnerabilities in software like: DEP ("Data Execution Prevention"), ASLR ("Address Space Layout Randomization") or certificate trust (Pinning).

The new release introduces the following changes:

  • Compatibility with Windows 10
  • Improved deployment and configuration via GPO
  • Improved writing of the mitigations to the registry
  • EAF/EAF+ pseudo-mitigation performance improvements
  • Support for untrusted fonts mitigation in Windows 10

More info about configuration guidelines is available here.

Xavier Mertens
ISC Handler - Freelance Security Consultant
PGP Key

Keywords: emet microsoft
2 comment(s)
My next class:

Comments

Slightly annoying that the 5.5 link on my bookmarked EMET page is dead (and is still labelled for the Beta.) If you run into the same thing, follow the link in the announcement, which is a directly linked to the download link.
You can download it via this link:
https://www.microsoft.com/en-us/download/details.aspx?id=50766

Diary Archives