Home/ MITRE Matrix/ Defense Evasion/ T1542.001

T1542.001System Firmware

T1542.001 — System Firmware is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 3 detection use cases covering it and 1 threat-intel article citing it.

Defense EvasionPersistence

View on the matrix → Filter Detection Library MITRE official spec ↗

3Use cases

1Articles

0Sub-techniques

2Tactics

↑ Parent technique: T1542 · Pre-OS Boot

Use cases covering this technique (3)

Windows BootLoader Inventory ESCU actions · hunting P Windows Suspicious File in EFI Volume ESCU actions · alerting P [LLM] bcdedit recovery-sequence modification consistent with GreatXML WinRE pivot Bespoke install · alerting DSΣPDDCS

Articles citing this technique (1)

crit New GreatXML Exploit Bypasses Windows BitLocker via Recovery Partition XML Files art-42