indirect branch tracking
An x86-64 check that every indirect call or jump lands on a special marker instruction, endbr64, placed only where the compiler expects one.
With CET indirect branch tracking enabled, the processor requires the target of an indirect call or jmp to begin with endbr64 (a no-op on older CPUs); compilers place it at function entries whose address is taken, and a missing marker raises a control-protection fault.
See also