CmdID

CmdID / Techniques / T1542

T1542.003 Pre-OS Boot: Bootkit

Adversaries may use bootkits to persist on systems. MITRE ATT&CK

1 Sigma rule T1542.003 on attack.mitre.org

Part of

MITRE ATT&CK
T1542Pre-OS Boot

Sigma rules tagged with it

process creation, the highest levels first