Enable Structured Exception Handling Overwrite Protection (SEHOP)ID: oval:org.secpod.oval:def:92721 | Date: (C)2023-08-29 (M)2023-12-12 |
Class: COMPLIANCE | Family: windows |
Windows includes support for Structured Exception Handling Overwrite Protection (SEHOP). We recommend enabling this feature to improve the security profile of the computer. The recommended state for this setting is: Enabled.Note: After you enable SEHOP, existing versions of Cygwin, Skype, and Armadillo-protected applications may not work correctly.Fix:(1) GPO: Computer Configuration\Policies\Administrative Templates\MS Security Guide\Enable Structured Exception Handling Overwrite Protection (SEHOP)(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel:DisableExceptionChainValidation
Platform: |
Microsoft Windows Server 2016 |