A kernel-mode framework called XMemGuard enforces a cross-process write-XOR-execute principle on Windows, detecting all 33 ...