Esc

System Firmware - T1542.001

(ATT&CK® Technique)

Definition

Adversaries may modify system firmware to persist on systems.The BIOS (Basic Input/Output System) and The Unified Extensible Firmware Interface (UEFI) or Extensible Firmware Interface (EFI) are examples of system firmware that operate as the software interface between the operating system and hardware of a computer.

D3FEND Inferred Relationships

Browse the D3FEND knowledge graph by clicking on the nodes below.

        graph LR;

     T1542001["System Firmware"] --> |modifies| SystemFirmware["System Firmware"]; class T1542001 OffensiveTechniqueNode;
        class SystemFirmware ArtifactNode; click SystemFirmware href "/dao/artifact/d3f:SystemFirmware";
        click T1542001 href "/offensive-technique/attack/T1542.001/"; click SystemFirmware href "/dao/artifact/d3f:SystemFirmware";             RestoreSoftware["Restore Software"] -->
          | restores | SystemFirmware["System Firmware"];

          RestoreSoftware["Restore Software"] -.->
            | may-restore | T1542001["System Firmware"] ;
          class RestoreSoftware DefensiveTechniqueNode;
          class SystemFirmware ArtifactNode;
          click RestoreSoftware href "/technique/d3f:RestoreSoftware"; FirmwareBehaviorAnalysis["Firmware Behavior Analysis"] -->
          | analyzes | SystemFirmware["System Firmware"];

          FirmwareBehaviorAnalysis["Firmware Behavior Analysis"] -.->
            | may-detect | T1542001["System Firmware"] ;
          class FirmwareBehaviorAnalysis DefensiveTechniqueNode;
          class SystemFirmware ArtifactNode;
          click FirmwareBehaviorAnalysis href "/technique/d3f:FirmwareBehaviorAnalysis"; FirmwareEmbeddedMonitoringCode["Firmware Embedded Monitoring Code"] -->
          | analyzes | SystemFirmware["System Firmware"];

          FirmwareEmbeddedMonitoringCode["Firmware Embedded Monitoring Code"] -.->
            | may-detect | T1542001["System Firmware"] ;
          class FirmwareEmbeddedMonitoringCode DefensiveTechniqueNode;
          class SystemFirmware ArtifactNode;
          click FirmwareEmbeddedMonitoringCode href "/technique/d3f:FirmwareEmbeddedMonitoringCode"; FirmwareVerification["Firmware Verification"] -->
          | verifies | SystemFirmware["System Firmware"];

          FirmwareVerification["Firmware Verification"] -.->
            | may-detect | T1542001["System Firmware"] ;
          class FirmwareVerification DefensiveTechniqueNode;
          class SystemFirmware ArtifactNode;
          click FirmwareVerification href "/technique/d3f:FirmwareVerification";                                                     SystemFirmwareVerification["System Firmware Verification"] -->
          | verifies | SystemFirmware["System Firmware"];

          SystemFirmwareVerification["System Firmware Verification"] -.->
            | may-detect | T1542001["System Firmware"] ;
          class SystemFirmwareVerification DefensiveTechniqueNode;
          class SystemFirmware ArtifactNode;
          click SystemFirmwareVerification href "/technique/d3f:SystemFirmwareVerification";              SoftwareUpdate["Software Update"] -->
          | updates | SystemFirmware["System Firmware"];

          SoftwareUpdate["Software Update"] -.->
            | may-harden | T1542001["System Firmware"] ;
          class SoftwareUpdate DefensiveTechniqueNode;
          class SystemFirmware ArtifactNode;
          click SoftwareUpdate href "/technique/d3f:SoftwareUpdate";

json