Enum ProcessMitigation 

pub enum ProcessMitigation {
    MicrosoftSignedOnly,
    BlockRemoteImages,
    PreferSystem32Images,
    DisableDynamicCode,
    RestrictPayload,
    BlockChildProcessCreation,
}

Supported process mitigations.

Variants

MicrosoftSignedOnly

Restrict binaries to Microsoft-signed images only.

BlockRemoteImages

Prevent loading images from remote locations.

PreferSystem32Images

Prefer loading images from System32.

DisableDynamicCode

Block dynamic code generation (ACG).

RestrictPayload

Enable payload restrictions (EAF, IAF, ROP checks).

BlockChildProcessCreation

Prevent this process from creating child processes.

Trait Implementations

impl Clone for ProcessMitigation

fn clone(&self) -> ProcessMitigation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessMitigation

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for ProcessMitigation

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for ProcessMitigation

fn eq(&self, other: &ProcessMitigation) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for ProcessMitigation

impl Eq for ProcessMitigation

impl StructuralPartialEq for ProcessMitigation