The Enhanced Mitigation Experience Toolkit (EMET) has long been a solution to help minimize attacks against the environment until Microsoft is able to produce fixes and updates to solve active vulnerabilities in the operating system.
It's been a while, but Microsoft has now updated EMET with some significant new features and is definitely a worthwhile upgrade.
The new features include:
- Updated default protection profiles, Certificate Trust rules, and Group Policy Object configuration.
- Shared remote desktop environments are now supported on Windows servers where EMET is installed.
- Windows Event logging mechanism allows for more accurate reporting in multi-user scenarios.
- Addressed several application-compatibility enhancements and mitigation false positive reporting.
The updated version (and the guide) can be downloaded from here: Enhanced Mitigation Experience Toolkit 4.1
If you are currently running and earlier version, it can be upgraded to the latest version pretty easily. Just run the EMET 4.1 installer, and from the Configuration Wizard chose Keep Existing Settings so your current mitigation settings are retained.
Learn more about EMET: Enhanced Mitigation Experience Toolkit Web site
NOTE: EMET 4.0 and 4.1 require the Microsoft .NET Framework 4.0. Additionally, for EMET to work with Internet Explorer 10 on Windows 8, KB2790907 must be installed.