LUA + SRP

Better still, just read that link!

Also, here’s some more information about SRP:
http://ssj100.fullsubject.com/windows-hardening-f5/mis-understandings-about-software-restriction-policies-srp-t22.htm

Those who lack access to SRP/AppLocker can use Defense+ as an anti-executable, and do so with minimal hassle. I present a method for doing so at https://forums.comodo.com/defense-sandbox-help-cis/using-comodo-internet-security-as-an-antiexecutable-t60303.0.html. Does anyone wish to test this method against malware or proof-of-concepts?