DEP Process Scanner Full Version - FOCSoft

DEP Process Scanner is the free command-line tool to scan and show all the DEP enabled Processes.

Data Execution Prevention (DEP) is a security feature introduced since Windows XP SP2 onwards and designed to prevent an application executing code from a non-executable memory regions such as Stack or Data region. It is primarily intended to mitigate the successful execution of buffer overflow based exploits.
DEP runs in two modes: hardware-enforced DEP for CPUs that can mark memory pages as nonexecutable, and software-enforced DEP with limited protection for CPUs that do not have hardware support.

DEP Process Scanner currently detects only Software-enforced DEP and helps you to find Processes which have (Software based) DEP enabled/disabled.

Here is the list of things you can do with this tool,

Show all DEP enabled Processes
Show all Non-DEP or DEP disabled Processes
Check the DEP status of Process with the ID
Check the DEP status of Process with the name
Check the DEP status of Executable File Path

Being a command-line tool makes it easy for automation. Also it can be handy tool for developers and researchers.

It is available in both 32-bit & 64-bit versions and works on all platforms starting from Windows XP to Windows 8.

How to use?

DEP Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe).

Here is the simple usage information

[For 32-bit Systems]

DEPProcessScanner32.exe [-d | -p <pid> | -n <process_name> | -f <exe_file_path>]


[For 64-bit Systems]

DEPProcessScanner64.exe [-d | -p <pid> | -n <process_name> | -f <exe_file_path>]

Examples of DEP Process Scanner

//List all DEP enabled Processes

DEPProcessScanner.exe

//List all Non-DEP or DEP disabled Processes

DEPProcessScanner.exe -d

//Check if DEP is enabled for Process with pid 1151

DEPProcessScanner.exe -p 1151

//Check if DEP is enabled for Process with name 'chrome'

DEPProcessScanner.exe -n "chrome"

//Check if DEP is enabled for Executable File

DEPProcessScanner.exe -f "c:\windows\explorer.exe"

//Show this help screen

DEPProcessScanner.exe -h

Note that it includes both 32-bit and 64-bit version (DEPProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.

Screenshots

FOCSoft.BlogSpot.Com

Release History

Version 1.0: 28th Jun 2013

Now supports detection of DEP status by checking with Executable file path. Also detects and alert user on accidental running of 32-bit version on 64-bit system.

Version 1.0: 14th May 2013

First public release of DEP Process Scanner.

Download

FREE Download DEP Process Scanner v1.5

License : Freeware
Platform : Windows XP, Vista, Windows 7, Windows 8

Download From Here

Please Share This Post With Your Frinds :) FOCSoft

SOCIALIZE IT →