Skip to content
Setup FoundrySetup Foundry
DESign in

Documentation · Policy appendix

Kernel protection

Every setting of the “Kernel protection” package with its effect, value and recommending sources.

since 0.9.8.11

Purpose

This page lists every setting of the “Kernel protection” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.

7 settings.

Notes

Enable Structured Exception Handling Overwrite Protection (SEHOP)

A REG_DWORD value of 0 enables Structured Exception Handling Overwrite Protection (SEHOP) system-wide. SEHOP mitigates exploits that use memory corruption to alter the chain of Windows Structured Exception Handling (SEH) handlers.

Turn On Virtualization Based Security

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

See also