ATT&CK technique
View on MITRE ATT&CK →
T1542.003
Bootkit
StealthPersistence
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Initramfs Unpacking via unmkinitramfs | production | 2026-09-18 |
| splunk | Linux EFI Bootloader File Deletion | production | 2026-07-08 |
| splunk | Windows EFI Bootloader File Modification | production | 2026-05-13 |
| splunk | Windows WinLogon with Public Network Connection | production | 2026-05-13 |
| sigma | Potential Ransomware or Unauthorized MBR Tampering Via Bcdedit.EXE | test | 2023-02-15 |