A second protection technique I implemented in HeapLocker is NOP sled detection. When you enable NOP sled monitoring, HeapLocker will create a new thread to periodically check (every second) newly committed virtual pages that are readable and writable. When a NOP sled is detected inside these pages with a length equal to or longer than  … Continue reading HeapLocker: NOP Sled Detection