BinSkim: Rule: BA2008 (EnableControlFlowGuard) 'sigcheck64.exe' does not enable the control flow guard (CFG) mitigation

Andrew Luty 0 Reputation points Microsoft Employee
2025-12-04T06:14:32.8933333+00:00

Sigcheck - Sysinternals | Microsoft Learn

 

sigcheck64.exe

Signature: 3bc3e674d5a1968b984a51802b40e194dddaffbbaecc2c1c692ee43f41e8abde

Tool: BinSkim: Rule: BA2008 (EnableControlFlowGuard). https://github.com/microsoft/binskim/blob/main/docs/BinSkimRules.md#rule-BA2008EnableControlFlowGuard

'sigcheck64.exe' does not enable the control flow guard (CFG) mitigation.

"The source code for Sigcheck, a Sysinternals tool, is not publicly available. Sigcheck is a proprietary tool developed by Microsoft as part of the Sysinternals suite. While you can download and use the tool for free, its source code is not open for modification or redistribution."

Is it possible to get an updated version with security mitigation fixes for all tools?

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
0 comments No comments
{count} votes

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.