News for hackers. Stuff that matters.

A comment on Using EMET to Disable EMET.

Re:Using EMET to Disable EMET by tetraverse on Tuesday February 23, 2016 @06:25PM (#11163215)
"EMET injects emet.dll or emet64.dll .. into every protected process, which installs Windows API hooks"

This is what the Enhanced Mitigation Experience Toolkit consists of - a DLL injection hack!

[ Parent | on HN ]
Re:Using EMET to Disable EMET by RachelF on Tuesday February 23, 2016 @06:36PM (#11163277)
Probably the worst thing about the new EMET is the speed hit. The new functions (EAF+) in EMET 5.5 can slow application loading from ~2 seconds to around 30.

I'm starting to wonder if Microsoft actually tests anything before releasing it these days.

For more read here: https://social.technet.microsoft.com/Forums/itmanagement/en-...

[ Parent | on HN ]