MJ0011 - Windows 10 Control Flow Guard Internals
MJ0011 - Windows 10 Control Flow Guard Internals
MJ0011 - Windows 10 Control Flow Guard Internals
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Add CFG Exception<br />
• CFG allows user process to add some exceptions for compatibility<br />
• Kernelbase!SetProcessValidCallTargets<br />
• It will call NtSetInformationVirtualMemory-> MiCfgMarkValidEntries<br />
to add valid call bits into bitmap