AppMitigations Microsoft.Samples.PowerShell.Commands.AppMitigations depControl Enable : Enable EmulateAtlThunks : EmulateAtlThunks Override DEP : OverrideDEP aslrControl BottomUp : BottomUp Override BottomUp : OverrideBottomUp ForceRelocateImages : ForceRelocateImages RequireInfo : RequireInfo Override ForceRelocate : OverrideForceRelocateImages HighEntropy : HighEntropy Override High Entropy : OverrideHighEntropy strictHandleControl Enable : Enable Override StrictHandle : OverrideStrictHandle systemCallControl DisableWin32kSystemCalls : DisableWin32kSystemCalls Audit : Audit Override SystemCall : OverrideSystemCall DisableFsctlSystemCalls : DisableFsctlSystemCalls AuditFsctlSystemCalls : AuditFsctlSystemCalls Override FsctlSystemCall : OverrideFsctlSystemCall extensionPointControl DisableExtensionPoints : DisableExtensionPoints Override ExtensionPoint : OverrideExtensionPoint dynamicCodeControl BlockDynamicCode : BlockDynamicCode AllowThreadsToOptOut : AllowThreadsToOptOut Audit : Audit Override DynamicCode : OverrideDynamicCode CFGControl Enable : Enable SuppressExports : SuppressExports Override CFG : OverrideCFG StrictControlFlowGuard : StrictControlFlowGuard Override StrictCFG : OverrideStrictCFG binarySignatureControl MicrosoftSignedOnly : MicrosoftSignedOnly AllowStoreSignedBinaries : AllowStoreSignedBinaries EnforceModuleDependencySigning : EnforceModuleDependencySigning AuditMicrosoftSignedOnly : Audit AuditStoreSigned : AuditStoreSigned AuditEnforceModuleDependencySigning: AuditEnforceModuleDependencySigning Override MicrosoftSignedOnly : OverrideMicrosoftSignedOnly Override DependencySigning : OverrideEnforceModuleDependencySigning fontDisableControl DisableNonSystemFonts : DisableNonSystemFonts Audit : Audit Override FontDisable : OverrideFontDisable imageLoadControl BlockRemoteImageLoads : BlockRemoteImageLoads AuditRemoteImageLoads : AuditRemoteImageLoads Override BlockRemoteImages : OverrideBlockRemoteImageLoads BlockLowLabelImageLoads : BlockLowLabelImageLoads AuditLowLabelImageLoads : AuditLowLabelImageLoads Override BlockLowLabel : OverrideBlockLowLabel PreferSystem32 : PreferSystem32 AuditPreferSystem32 : AuditPreferSystem32 Override PreferSystem32 : OverridePreferSystem32 payloadControl EnableExportAddressFilter : EnableExportAddressFilter AuditEnableExportAddressFilter : AuditEnableExportAddressFilter Override ExportAddressFilter : OverrideEnableExportAddressFilter EnableExportAddressFilterPlus : EnableExportAddressFilterPlus AuditEnableExportAddressFilterPlus : AuditEnableExportAddressFilterPlus Override ExportAddressFilterPlus : OverrideEnableExportAddressFilterPlus EAFModules : EAFModules EnableImportAddressFilter : EnableImportAddressFilter AuditEnableImportAddressFilter : AuditEnableImportAddressFilter Override ImportAddressFilter : OverrideEnableImportAddressFilter EnableRopStackPivot : EnableRopStackPivot AuditEnableRopStackPivot : AuditEnableRopStackPivot Override EnableRopStackPivot : OverrideEnableRopStackPivot EnableRopCallerCheck : EnableRopCallerCheck AuditEnableRopCallerCheck : AuditEnableRopCallerCheck Override EnableRopCallerCheck : OverrideEnableRopCallerCheck EnableRopSimExec : EnableRopSimExec AuditEnableRopSimExec : AuditEnableRopSimExec Override EnableRopSimExec : OverrideEnableRopSimExec SEHOPControl Enable : Enable TelemetryOnly : TelemetryOnly Audit : Audit Override SEHOP : OverrideSEHOP HeapControl TerminateOnError : TerminateOnError Override HEAP : OverrideHeap ChildProcessControl DisallowChildProcessCreation : DisallowChildProcessCreation Audit : Audit Override ChildProcess : OverrideChildProcess UserShadowStackControl UserShadowStack : UserShadowStack UserShadowStackStrictMode : UserShadowStackStrictMode AuditUserShadowStack : AuditUserShadowStack Override UserShadowStack : OverrideUserShadowStack ProcessName : ProcessName Source : Source Id : Id DEP: 4 Dep depControl ASLR: 4 aslr aslrControl StrictHandle: 4 strictHandle strictHandleControl System Call: 4 SystemCall systemCallControl ExtensionPoint: 4 extensionPoint extensionPointControl DynamicCode: 4 dynamicCode dynamicCodeControl CFG: 4 cfg CFGControl BinarySignature: 4 binarySignature binarySignatureControl FontDisable: 4 fontDisable fontDisableControl ImageLoad: 4 imageLoad imageLoadControl Payload: 4 Payload payloadControl SEHOP: 4 Sehop SEHOPControl Heap: 4 Heap HeapControl Child Process: 4 ChildProcess ChildProcessControl User Shadow Stack: 4 UserShadowStack UserShadowStackControl ProcessMitigations Microsoft.Samples.PowerShell.Commands.ProcessMitigations depControl Enable : Enable EmulateAtlThunks : EmulateAtlThunks aslrControl BottomUp : BottomUp ForceRelocateImages : ForceRelocateImages RequireInfo : RequireInfo HighEntropy : HighEntropy strictHandleControl Enable : Enable systemCallControl DisableWin32kSystemCalls : DisableWin32kSystemCalls Audit : Audit DisableFsctlSystemCalls : DisableFsctlSystemCalls AuditFsctlSystemCalls : AuditFsctlSystemCalls extensionPointControl DisableExtensionPoints : DisableExtensionPoints dynamicCodeControl BlockDynamicCode : BlockDynamicCode AllowThreadsToOptOut : AllowThreadsToOptOut Audit : Audit CFGControl Enable : Enable SuppressExports : SuppressExports StrictControlFlowGuard : StrictControlFlowGuard binarySignatureControl MicrosoftSignedOnly : MicrosoftSignedOnly AllowStoreSignedBinaries : AllowStoreSignedBinaries AuditMicrosoftSignedOnly : Audit AuditStoreSigned : AuditStoreSigned fontDisableControl DisableNonSystemFonts : DisableNonSystemFonts Audit : Audit imageLoadControl BlockRemoteImageLoads : BlockRemoteImageLoads AuditRemoteImageLoads : AuditRemoteImageLoads BlockLowLabelImageLoads : BlockLowLabelImageLoads AuditLowLabelImageLoads : AuditLowLabelImageLoads PreferSystem32 : PreferSystem32 AuditPreferSystem32 : AuditPreferSystem32 payloadControl EnableExportAddressFilter : EnableExportAddressFilter AuditEnableExportAddressFilter : AuditEnableExportAddressFilter EnableExportAddressFilterPlus : EnableExportAddressFilterPlus AuditEnableExportAddressFilterPlus : AuditEnableExportAddressFilterPlus EnableImportAddressFilter : EnableImportAddressFilter AuditEnableImportAddressFilter : AuditEnableImportAddressFilter EnableRopStackPivot : EnableRopStackPivot AuditEnableRopStackPivot : AuditEnableRopStackPivot EnableRopCallerCheck : EnableRopCallerCheck AuditEnableRopCallerCheck : AuditEnableRopCallerCheck EnableRopSimExec : EnableRopSimExec AuditEnableRopCallerCheck : AuditEnableRopCallerCheck ChildProcessControl DisallowChildProcessCreation : DisallowChildProcessCreation Audit : Audit SEHOPControl Enable : Enable UserShadowStackControl UserShadowStack : UserShadowStack UserShadowStackStrictMode : UserShadowStackStrictMode AuditUserShadowStack : AuditUserShadowStack SetContextIpValidation : SetContextIpValidation AuditSetContextIpValidation : AuditSetContextIpValidation BlockNonCetBinaries : BlockNonCetBinaries BlockNonCetBinariesNonEhcont : BlockNonCetBinariesNonEhcont AuditBlockNonCetBinaries : AuditBlockNonCetBinaries ProcessName : ProcessName Source : Source Id : Id DEP: 4 Dep depControl ASLR: 4 aslr aslrControl StrictHandle: 4 strictHandle strictHandleControl System Call: 4 SystemCall systemCallControl ExtensionPoint: 4 extensionPoint extensionPointControl DynamicCode: 4 dynamicCode dynamicCodeControl CFG: 4 cfg CFGControl BinarySignature: 4 binarySignature binarySignatureControl FontDisable: 4 fontDisable fontDisableControl ImageLoad: 4 imageLoad imageLoadControl Payload: 4 Payload payloadControl SEHOP: 4 Sehop SEHOPControl Child Process: 4 ChildProcess ChildProcessControl User Shadow Stack: 4 UserShadowStack UserShadowStackControl