locked
Documentation suggestion - command line defaults RRS feed

  • General discussion

  • In the Users Guide for EMET 2.1 it says the following 

    For example, consider the command ‘EMET_conf --add "c:\program files\app \foo.exe" -EAF -DEP’. This will configure EMET for foo.exe with all mitigations set to their default configuration except that both EAF and DEP will be disabled. 

    This text does not make it clear that you do not have to specify every mitigation manually in the command line. For example, to enable all migitiations for Adobe Reader 9, all you have to do is run: 

    EMET_Conf.exe --set "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"

    The text "all mitigation set to their default configuration" could be construed as meaning the default for the application (which I thought would be off) rather than the defaults that are checked when added through the GUI.

     


    My idea of a party is a virtualization server and a room of TechNet DVDs
    • Changed type Daniel Wolf Wednesday, May 18, 2011 11:46 PM Not a question
    Wednesday, May 18, 2011 11:46 PM

All replies

  • ...and the --import command should support environment variables like %ProgramFiles% in the xml files.
    Thursday, May 19, 2011 2:16 PM