Exploit Guard Protection overview

Prev Next

Exploit Guard Protection protects your host endpoints from previously unrecognized exploits and other online attacks. This xAgent feature has two components: Exploit Guard detection and Exploit Guard prevention that allows it to detect and prevent exploit behaviors on your host endpoints that occur during the use of

Adobe Reader, Adobe Flash, Internet Explorer, Firefox, Google Chrome, Java, Microsoft Outlook, Microsoft Word, Microsoft Excel, and Microsoft PowerPoint.

See Understanding Exploit Guard Protection.

Examples of the exploit types that Exploit Guard Protection can detect and prevent include:

  • Return-oriented programming (ROP) attacks

  • Reverse shell attempts in Windows environments

  • Heap spray attacks

  • Application crashes caused by exploits

  • Structured Exception Handling Overwrite Protection (SEHOP) corruption

  • Drive-by downloads of programs

  • Null page exploits

  • Microsoft Office macro-based exploits

  • Java exploits

  • Access token privilege escalation detection