McAfee HISCDE-AB-IA Product Guide - Page 124
Class Buffer Overflow, Class Files, Class Hook
View all McAfee HISCDE-AB-IA manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 124 highlights
Appendix A - Writing Custom Signatures and Exceptions Windows custom signatures Class Buffer Overflow Directives 32-bit processes on 32-bit Windows OS (x32) bo: XP 2K3 V stack xx x heap xx x writeable_memory x x x invalid_call xx x target_bytes xx x call_not_found xx x call_return_unreadable x x x call_different_target x x x call_return_to_api x x x 2K8 7 x x x x x x x x x x x x x x x x x x 32-bit processes on 64-bit 64-bit processes on Windows OS (x64) 64-bit Windows OS (x64) XP 2K3 V 2K8 7 XP 2K3 V 2K8 7 x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x Class Files Directives 32-bit processes on 32-bit Windows OS (x32) files: XP 2K3 V 2K8 7 create xx x x x read xx x x x write xx x x x execute xx x x x delete xx x x x rename xx x x x attribute x x x x x writeop xx x x x hardlink xx x x x 32-bit processes on 64-bit Windows OS (x64) XP 2K3 V 2K8 7 x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x x x xx x 64-bit processes on 64-bit Windows OS (x64) XP 2K3 V 2K8 7 xx xx x xx xx x xx xx x xx xx x xx xx x xx xx x xx xx x xx xx x xx xx x Class Hook Directives 32-bit processes on 32-bit 32-bit processes on 64-bit Windows OS (x32) Windows OS (x64) hook: XP 2K3 V 2K8 7 XP 2K3 V 2K8 7 set_windows_hook x x xx x x x xx x 64-bit processes on 64-bit Windows OS (x64) XP 2K3 V 2K8 7 xx xx x 124 McAfee Host Intrusion Prevention 8.0 Product Guide for ePolicy Orchestrator 4.5