&quot;EMET injects emet.dll or emet64.dll .. into every protected process, which installs Windows API hooks&quot;<p>This is what the Enhanced Mitigation Experience Toolkit consists of - a DLL injection hack!