Are these normal on Exploit protection?

Sma Sandhu 0

On Exploit Protection in the Program Settings I have all these programs? here and some, such as: PresentationHost.exe has like 6 overrides?

It it normal to have all these or are they a virus? Or were they altered by the virus that was on?

1 answer

Reza-Ameri 17,011 Reputation points

2023-03-15T20:40:08.07+00:00

Yes, they are normal and these are pre-defined settings and having these features would improve your protection against 0-days and other exploits. You always could modify these settings.

In case you have any feedback or recommendation, you may report them using the Feedback Hub app.
Please sign in to rate this answer.
Kim Jong Un 0 Reputation points

2025-01-13T23:58:15.6533333+00:00

Hello,

You mentioned "You always could modify these settings" but I wonder, can you do so without potentially unwanted or even catastrophic failures? For instance, if we disallow "Runtimebroker.exe" from having the ability to inject DLLs into all processes (including Windows Hooks).. couldn't this possibly make the system not boot properly, or cause applications to behave badly?

I am not trying to shoot your response down, I'm just trying to get a better understanding of your familiarity with actually doing this. I would much rather restrict these applications (including built-in) from doing things, rather than allowing potentially un-safe (security-wise) operations. That said, a broken OS is very secure, but very unusable at the same time.

TL;DR: If there's any documentation somewhere that might give us an idea of what the implications are for changing the security exceptions with these built-in processes, that would be really great. Flipping these switches manually and trying to log what happens is a non-ideal prospect, as I'm sure you can imagine.

Thank you, in advance, for your answer(s) kind sir.

Faithfully and unwaveringly yours,

Kim Jong Un

Supreme Leader - Democratic People's Republic of Korea
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Are these normal on Exploit protection?

1 answer

Your answer