Microsoft just announced a new version of the Enhanced Mitigation Experience Toolkit (EMET) with brand new features and mitigations. This release marks a big milestone for EMET since this is the first version that is available as an officially-supported product.
Today’s release comes with some new features:
- EMET is an officially-supported product through the online forum
- “Bottom-up Rand” new mitigation randomizes (8 bits of entropy) the base address of bottom-up allocations (including heaps, stacks, and other memory allocations) once EMET has enabled this mitigation.
- Export Address Filtering is now available for 64 bit processes. EAF filters all accesses to the Export Address Table which blocks most of the existing shellcodes
- Improved command line support for enterprise deployment and configuration
- Ability to export/import EMET settings
- Improved SEHOP (structured exception handler overwrite protection) mitigation
- Minor bug fixes
You can download here.
[Source: Security Research & Defense]