Code Integrity Guard (CIG)

Aynı mitigation/technique: bkz. canonical Windows Code Integrity Guard.

Mechanism

CIG, bir process'e yalnızca düzgün signed (Microsoft / Windows Store / WHQL) image'ların memory-manager map zamanında yüklenmesine izin veren Windows process-mitigation policy'sidir. Tam mekanizma, API ve residual-risk analizi canonical not'ta: Windows Code Integrity Guard.

Walkthrough

Tam walkthrough canonical not'ta: Windows Code Integrity Guard.

References

• Exploit protection reference — Code integrity guard (Microsoft Learn)
• Mitigating arbitrary native code execution in Microsoft Edge