ATT&CK technique
View on MITRE ATT&CK →
T1542.001
System Firmware
StealthPersistence
6 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Linux EFI Bootloader File Deletion | production | 2026-07-08 |
| splunk | Linux Possible Bootloader Modification | production | 2026-07-08 |
| splunk | Windows BootLoader Inventory | experimental | 2026-05-13 |
| splunk | Windows Suspicious File in EFI Volume | production | 2026-05-13 |
| sigma | UEFI Persistence Via Wpbbin - FileCreation | test | 2022-07-18 |
| sigma | UEFI Persistence Via Wpbbin - ProcessCreation | test | 2022-07-18 |