MITRE ATT&CK detection coverage

← Back to main site

Home/ MITRE Matrix/ Defense Evasion/ T1542

T1542Pre-OS Boot

T1542 — Pre-OS Boot is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 2 detection use cases covering it.

Defense EvasionPersistence

View on the matrix → Filter Detection Library MITRE official spec ↗

2Use cases

0Articles

5Sub-techniques

2Tactics

Sub-techniques (5)

T1542.003 · Bootkit T1542.002 · Component Firmware T1542.004 · ROMMONkit T1542.001 · System Firmware T1542.005 · TFTP Boot

Use cases covering this technique (2)

Windows EFI Volume Mount Attempt Via Mountvol ESCU actions · hunting P Windows Registry BootExecute Modification ESCU actions · alerting P