.. / DEP

Description:

Data Execution Prevention, also known as No-Execute (NX), is a memory-level mechanism designed to prevent the unauthorized execution of certain pages, which could lead to access violations. For example, attempting to access a memory address marked as “non-executable” will trigger an access violation exception (STATUS_ACCESS_VIOLATION). DEP is enabled by default for all 64-bit processes and services on x64 systems.




Functions:

Kernel32.dll

SetProcessDEPPolicy

GetProcessDEPPolicy

VirtualAlloc

VirtualAllocEx

VirtualProtect


References: