.. / CFG

Description:

CFG or Control Flow Guard it’s a Windows security feature designed to prevent memory corruption vulnerabilities and reduce the execution of exploits, such as buffer overflows. CFG is an enhancement over previous exploit mitigation technologies, such as /GS (Buffer Security Check), Data Execution Prevention (DEP), and Address Space Layout Randomization (ASLR).



CFG Image

Functions:

Kernel32.dll

GetProcessMitigationPolicy

SetProcessMitigationPolicy

VirtualAlloc2

VirtualAlloc

VirtualAlloEx

Ntdll.dll

NtSetInformationVirtualMemory

LdrControlFlowGuardEnforced


References: