EMET (Enhanced Mitigation Experience Toolkit) is a free Microsoft tool that provides additional security for applications like MS Office, Acrobat, Flash, and Java by enabling exploit mitigation techniques like ASLR, DEP, and SEHOP. While EMET strengthens security, it does not prevent all exploits and its management and deployment require planning. Questions about EMET and Microsoft's strategy are answered on their security blogs and technical library pages.

1. Employing EMET for Application Security

2. GCIA, GCIH, GSEC, CCNA, CISSP
@dacoursey

3. EMET

5. MS Office
Acrobat
Flash
Java

7. DEP
ASLR
SEHOP
etc…

9. Progress Report
ASLR
DEP

12. What is it?

13. But what about…

25. What does it NOT do?

27. Deployment

28. Management

29. Microsoft’s
Strategy

30. Questions?

31. http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx?Redirected=true
https://blogs.technet.com/b/srd/archive/2009/02/02/preventing-the-exploitation-of-seh-overwrites-with-sehop.aspx?Redirected=true
https://blogs.technet.com/b/security/archive/2012/08/08/microsoft-s-free-security-tools-enhanced-mitigation-experience-toolkit.aspx?Redirected=true
http://technet.microsoft.com/en-us/library/dd837644(v=ws.10).aspx