DEP Process Scanner : Command-line Tool to Scan and Show DEP Enabled Processes
DEP Process Scanner
See Also
DEP Process Scanner is the free command-line tool to scan and show all the DEP enabled Processes.

Data Execution Prevention (DEP) is a security feature introduced since Windows XP SP2 onwards and designed to prevent an application executing code from a non-executable memory regions such as Stack or Data region. It is primarily intended to mitigate the successful execution of buffer overflow based exploits.

DEP runs in two modes: hardware-enforced DEP for CPUs that can mark memory pages as nonexecutable, and software-enforced DEP with limited protection for CPUs that do not have hardware support.

DEP Process Scanner currently detects only Software-enforced DEP and helps you to find Processes which have (Software based) DEP enabled/disabled.

Here is the list of things you can do with this tool,

  • Show all DEP enabled Processes
  • Show all Non-DEP or DEP disabled Processes
  • Check the DEP status of Process with the ID
  • Check the DEP status of Process with the name
  • Check the DEP status of Executable File Path

Being a command-line tool makes it easy for automation. Also it can be handy tool for developers and researchers.

It is available in both 32-bit & 64-bit versions and works on all platforms starting from Windows XP to Windows 8.
How to use?
DEP Process Scanner is very easy to use tool. It is command-line/console based tool, hence you have to launch it from the command prompt (cmd.exe).

Here is the simple usage information
[For 32-bit Systems]
DEPProcessScanner32.exe [-d | -p <pid> | -n <process_name> | -f <exe_file_path>]
[For 64-bit Systems]
DEPProcessScanner64.exe [-d | -p <pid> | -n <process_name> | -f <exe_file_path>]
Examples of DEP Process Scanner
//List all DEP enabled Processes
//List all Non-DEP or DEP disabled Processes
DEPProcessScanner.exe -d
//Check if DEP is enabled for Process with pid 1151
DEPProcessScanner.exe -p 1151
//Check if DEP is enabled for Process with name 'chrome'
DEPProcessScanner.exe -n "chrome"
//Check if DEP is enabled for Executable File
DEPProcessScanner.exe -f "c:\windows\explorer.exe"
//Show this help screen
DEPProcessScanner.exe -h
Note that it includes both 32-bit and 64-bit version (DEPProcessScanner64.exe). On 64-bit operating systems, you have to use the 64-bit version.
DEPProcessScanner in Action
Release History
Version 1.0:  28th Jun 2013
Now supports detection of DEP status by checking with Executable file path. Also detects and alert user on accidental running of 32-bit version on 64-bit system.
Version 1.0:  14th May 2013
First public release of DEP Process Scanner.
FREE Download DEP Process Scanner v1.5

License  : Freeware
Platform : Windows XP, Vista, Windows 7, Windows 8

See Also