Detections
Analytics

Enable Structured Exception Handling Overwrite Protection (SEHOP)

Information

If this setting is enabled SEHOP is enforced. For more information see https://support.microsoft.com/en-us/help/956607/how-to-enable-structured-exception-handling-overwrite-protection-sehop-in-windows-operating-systems.

If this setting is disabled or not configured SEHOP is not enforced for 32-bit processes.

Solution

Policy Path: MS Security Guide
Policy Setting Name: Enable Structured Exception Handling Overwrite Protection (SEHOP)

See Also

https://techcommunity.microsoft.com/blog/microsoft-security-baselines/windows-11-version-25h2-security-baseline/4456231

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(2)

Plugin: Windows

Control ID: 28b1fa760b78a37e377357802611d279a66d3f1a232a6b77dbafcb6c1f982238