Skip to content
Setup FoundrySetup FoundryDoku
latest · 0.9.8.15
latest · 0.9.8.150.9.8.150.9.8.140.9.8.120.9.8.110.9.8.100.9.8.90.9.8.80.9.8.6
DESign in

Kernel protection ​

since 0.9.8.11

Purpose ​

This page lists every setting of the “Kernel protection” package: what it does, which value Setup Foundry sets and who recommends it. It is generated from the catalog and never edited by hand.

7 settings.

Notes ​

Enable Structured Exception Handling Overwrite Protection (SEHOP) ​

A REG_DWORD value of 0 enables Structured Exception Handling Overwrite Protection (SEHOP) system-wide. SEHOP mitigates exploits that use memory corruption to alter the chain of Windows Structured Exception Handling (SEH) handlers.

Turn On Virtualization Based Security ​

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security ​

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security ​

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security ​

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security ​

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

Turn On Virtualization Based Security ​

This computer policy controls Virtualization-based Security (VBS) and several protections that use it. VBS uses hardware virtualization and the Windows hypervisor to create a secure environment isolated from the normal operating system. Windows can host security services in this environment and protect selected resources even if the regular operating-system kernel is compromised.

See also ​