Exploit Protection

@@ -32,7 +32,7 @@ When a mitigation is found on the device, a notification is displayed from the A  You can also use [audit mode](evaluate-exploit-protection.md) to evaluate how exploit protection would affect your organization if it were enabled. -Many of the features in the [Enhanced Mitigation Experience Toolkit (EMET)](https://support.microsoft.com/topic/b529d543-2a81-7b5a-d529-84b30e1ecee0) are included in exploit protection. In fact, you can convert and import existing your EMET configuration profiles into exploit protection. To learn more, see [Import, export, and deploy exploit protection configurations](import-export-exploit-protection-emet-xml.md).+Many of the features in the [Enhanced Mitigation Experience Toolkit (EMET)](https://support.microsoft.com/servicing/developer/emet-mitigations-guidelines) are included in exploit protection. In fact, you can convert and import existing your EMET configuration profiles into exploit protection. To learn more, see [Import, export, and deploy exploit protection configurations](import-export-exploit-protection-emet-xml.md).  > [!IMPORTANT] > If you're currently using EMET, it's important to note that[EMET reached end of support on July 31, 2018](https://www.microsoft.com/msrc/blog/2016/11/beyond-emet). Consider replacing EMET with exploit protection in Windows 10.@@ -119,14 +119,14 @@ The table in this section indicates the availability and support of native mitig |Data Execution Prevention (DEP) | Yes | Yes | |Export address filtering (EAF) | Yes | Yes | |Force randomization for images (Mandatory ASLR) | Yes | Yes |-|NullPage Security Mitigation | Yes<br />Included natively in Windows 10 and Windows 11 <br/>For more information, see [Mitigate threats by using Windows 10 security features](/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10#understanding-windows-10-in-relation-to-the-enhanced-mitigation-experience-toolkit) | Yes |+|NullPage Security Mitigation | Yes<br />Included natively in Windows 10 and Windows 11 <br/>For more information, see [Mitigate threats by using Windows 10 security features](/previous-versions/windows/it-pro/windows-10/security/threat-protection/overview-of-threat-mitigations-in-windows-10#understanding-windows-10-in-relation-to-the-enhanced-mitigation-experience-toolkit) | Yes | |Randomize memory allocations (Bottom-Up ASLR) | Yes | Yes | |Simulate execution (SimExec) | Yes | Yes | |Validate API invocation (CallerCheck) | Yes | Yes | |Validate exception chains (SEHOP) | Yes | Yes | |Validate stack integrity (StackPivot) | Yes | Yes | |Certificate trust (configurable certificate pinning) | Windows 10 and Windows 11 provide enterprise certificate pinning | Yes |-|Heap spray allocation | Ineffective against newer browser-based exploits; newer mitigations provide better protection<br/>For more information, see [Mitigate threats by using Windows 10 security features](/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10#understanding-windows-10-in-relation-to-the-enhanced-mitigation-experience-toolkit) | Yes |+|Heap spray allocation | Ineffective against newer browser-based exploits; newer mitigations provide better protection<br/>For more information, see [Mitigate threats by using Windows 10 security features](/previous-versions/windows/it-pro/windows-10/security/threat-protection/overview-of-threat-mitigations-in-windows-10#understanding-windows-10-in-relation-to-the-enhanced-mitigation-experience-toolkit) | Yes | |Block low integrity images | Yes | No | |Code integrity guard | Yes | No | |Disable extension points | Yes | No |@@ -138,7 +138,7 @@ The table in this section indicates the availability and support of native mitig |Validate image dependency integrity | Yes | No |  > [!NOTE]-> The Advanced ROP mitigations that are available in EMET are superseded by ACG in Windows 10 and Windows 11, which other EMET advanced settings are enabled by default, as part of enabling the anti-ROP mitigations for a process. For more information on how Windows 10 employs existing EMET technology, see the [Mitigation threats by using Windows 10 security features](/windows/security/threat-protection/overview-of-threat-mitigations-in-windows-10#understanding-windows-10-in-relation-to-the-enhanced-mitigation-experience-toolkit).+> The Advanced ROP mitigations that are available in EMET are superseded by ACG in Windows 10 and Windows 11, which other EMET advanced settings are enabled by default, as part of enabling the anti-ROP mitigations for a process. For more information on how Windows 10 employs existing EMET technology, see the [Mitigation threats by using Windows 10 security features](/previous-versions/windows/it-pro/windows-10/security/threat-protection/overview-of-threat-mitigations-in-windows-10#understanding-windows-10-in-relation-to-the-enhanced-mitigation-experience-toolkit).  ## See also