I am looking at KeePass and trying to figure out how it protects its memory exactly. Is it because the use of
KeePassLib.Security.ProtectedBinary class for all it's memory allocations or is it clearing
PROCESS_VM_READ permissions on the process? Or is it something else?
This is what process explorer shows*
[*] Windows is doing some scaling kung-fu, I've not idea how to take a screenshot that is not blurry