New version 5.1 ... http://support2.microsoft.com/kb/3015976 >From MS ... Today, we’re releasing the Enhanced Mitigation Experience Toolkit (EMET) 5.1 which will continue to improve your security posture by providing increased application compatibility and hardened mitigations. Following is the list of the main changes and improvements: Several application compatibility issues with Internet Explorer, Adobe Reader, Adobe Flash, and Mozilla Firefox and some of the EMET mitigations have been solved.Certain mitigations have been improved and hardened to make them more resilient to attacks and bypasses.Added “Local Telemetry” feature that allows to locally save memory dumps when a mitigation is triggered.All the changes in this release are listed in Microsoft KB Article 3015976. If you are using Internet Explorer 11, either on Windows 7 or Windows 8.1, and have deployed EMET 5.0, it is particularly important to install EMET 5.1 as compatibility issues were discovered with the November Internet Explorer security update and the EAF+ mitigation. Alternatively, you can temporarily disable EAF+ on EMET 5.0. Details on how to disable the EAF+ mitigation are available in the User Guide. In general we recommend upgrading to the latest version of EMET to benefit from all the enhancements. - The EMET Team
Shane From: [email protected] To: [email protected] Subject: RE: [mssms] Enhanced Mitigation Experience Toolkit (EMET) Date: Thu, 25 Sep 2014 22:10:50 +0000 Thanks Paul! Thanks, Ken … From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Thursday, September 25, 2014 2:54 PM To: [email protected] Subject: RE: [mssms] Enhanced Mitigation Experience Toolkit (EMET) Ken, Here's the link where I found it and a screen shot: http://social.technet.microsoft.com/Forums/security/en-US/c011f250-a379-435f-9bbf-7354c27301d6/hiding-emet-notification-in-taskbar-does-not-work-emet-41-win-7?forum=emet From: "Lutz, Ken" <[email protected]> To: "[email protected]" <[email protected]> Date: 09/25/2014 04:52 PM Subject: RE: [mssms] Enhanced Mitigation Experience Toolkit (EMET) Sent by: [email protected] Paul, Would you mind sharing the XenApp registry key? I will eventually be putting this on Citrix. Thanks, Ken … From: [email protected] [mailto:[email protected]] On Behalf Of [email protected] Sent: Thursday, September 25, 2014 11:38 AM To: [email protected] Subject: Re: [mssms] Enhanced Mitigation Experience Toolkit (EMET) We have it on about 15 workstations and 2 Windows 2008 R2 servers that run Citirx XenApp 6.5. Using recommended settings. No major issues encountered on the workstations. Couple of minor issues with the System tray icon displaying in Citrix sessions. Registry key fixed that issue. Paul From: "Lutz, Ken" <[email protected]> To: SMS List <[email protected]> Date: 09/25/2014 03:20 PM Subject: [mssms] Enhanced Mitigation Experience Toolkit (EMET) Sent by: [email protected] Has anyone deployed this to the enterprise yet? I’m just starting to look at this and was wondering what issues people may be seeing with this product. Are you just using the ‘recommended settings’ or did you create some custom profiles? If you created custom profiles what sort of things did you add/delete/change? Thanks… Ken Lutz Senior Systems Administrator Information Systems Department Spokane County 815 N. Jefferson Spokane, Washington 99260
