Microsoft EMET Tool – Can be your Zero Day Protector?

You have performed the periodic Vulnerability Assessment and patched all your vulnerabilities. Your Perimeter, DMZ, Security devices and IT machines are 100% compliance, Your endpoint and IT devices are patched with all your Antivirus and 100% compliance, Your websites are completely protected by WAF and customized rules

But, what you do, if you hit with ZERO DAY? All your 100% compliance will be questioned as “ZERO %” and all your security solutions might not help on the crucial time

No Man’s Land – Challenge on top of your table for survival, a real catastrophic HIT

If the ZERO Day hits sure all CSO, CISO, CTO, TCO, OP’s & Security Managers will be more edgy and eagle-eyed on how to protect their environment from ZERO DAY because:

• Can’t remove the software / applications which is impacted
• Open source dependency / In-house tool dependency
• Upgrade and Compatibility issues
• Security devices vendor solutions won’t be applicable
• No Work around
• No Immediate patches
• No Mitigation’s
• No solutions

A Real Bad Catastrophic!!!

But Microsoft has a simple solution which can make you survive until you get your ZERO DAY PATCHES!!!

The simple solution has been tested in a Multinational Corporation who employed with 261,200 successfully. Were able to mitigate the famous Flash, Adobe ZERO DAY’s and so on !!!

Convert your entire windows environment

Convert your entire windows Server environment

How can you Deploy EMET:

1. Group Policy
2. SCCM Push Installation
3. Manual Installation through Command Prompt

For a Detailed installation: https://www.microsoft.com/en-us/download/details.aspx?id=50802

What Version EMET Supports:

Microsoft still suggests that their new Windows Operating System Version 10 will mitigate better without EMET, but CERT Engineering Institute confirms “Windows 10 + EMET will be the real Mitigations”

What all are the mitigations exist with EMET https://technet.microsoft.com/en-us/security/jj653751

If you would like to know the details comparison about EMET, please jump into https://insights.sei.cmu.edu/cert/2016/11/windows-10-cannot-protect-insecure-applications-like-emet-can.html

Professionals, after reading don’t wait for your ZERO DAY to occur to do the research on EMET. Right away get ready your JUMP BAG to perform the right mitigation at right time

Don’t let the Catastrophic to hit your organization. If you are not a decision maker put this to your C-Level’s, M-Level’s to give approval for testing and roll-out

If you don’t have a proper incident response plan sure the hastes makes waste sure for you !!! Be Proactive