Reply to thread

Message

<blockquote data-quote="ErzCrz" data-source="post: 970201" data-attributes="member: 81799">Probably more for another thread but I used to follow [USER=71262]@oldschool[/USER] &#039;s prior config with the below but there&#039;s a topic around here somewhere that goes more into it. These days I just use default.- for Brave, Edge and Firefox:Block low integrity images - ONBlock remote images - ONBlock untrusted fonts - ONControl flow guard (CFG) - ONData execution prevention (DEP) - ON + Enable thunk emulation - CHECKEDDisable extension points - ONForce randomization for images (Mandatory ASLR) - ON + Do not allow stripped images - CHECKEDRandomize memory allocations (Bottom-up ASLR) - ONValidate exception chains (SEHOP) - ONValidate handle usage - ONValidate heap integrity - ONValidate image dependency integrity - ONADD for Edge Chromium only: Code integrity guard - ON (with or without Also allow images signed by M$ Store CHECKED)</blockquote>

[QUOTE="ErzCrz, post: 970201, member: 81799"] Probably more for another thread but I used to follow [USER=71262]@oldschool[/USER] 's prior config with the below but there's a topic around here somewhere that goes more into it. These days I just use default. - for Brave, Edge and Firefox: Block low integrity images - ON Block remote images - ON Block untrusted fonts - ON Control flow guard (CFG) - ON Data execution prevention (DEP) - ON + Enable thunk emulation - CHECKED Disable extension points - ON Force randomization for images (Mandatory ASLR) - ON + Do not allow stripped images - CHECKED Randomize memory allocations (Bottom-up ASLR) - ON Validate exception chains (SEHOP) - ON Validate handle usage - ON Validate heap integrity - ON Validate image dependency integrity - ON ADD for Edge Chromium only: Code integrity guard - ON (with or without Also allow images signed by M$ Store CHECKED) [/QUOTE]

Verification