Exploit Guard Protection protects your host endpoints from previously unrecognized exploits and other online attacks. This xAgent feature has two components: Exploit Guard detection and Exploit Guard prevention that allows it to detect and prevent exploit behaviors on your host endpoints that occur during the use of
Adobe Reader, Adobe Flash, Internet Explorer, Firefox, Google Chrome, Java, Microsoft Outlook, Microsoft Word, Microsoft Excel, and Microsoft PowerPoint.
See Understanding Exploit Guard Protection.
Examples of the exploit types that Exploit Guard Protection can detect and prevent include:
Return-oriented programming (ROP) attacks
Reverse shell attempts in Windows environments
Heap spray attacks
Application crashes caused by exploits
Structured Exception Handling Overwrite Protection (SEHOP) corruption
Drive-by downloads of programs
Null page exploits
Microsoft Office macro-based exploits
Java exploits
Access token privilege escalation detection