HOW TO HUNT FOR UEFI MALWARE USING VELOCIRAPTOR

Summary from the TLDR InfoSec newsletter

UEFI attacks, which require advanced techniques, are becoming more prevalent. This article begins with an overview of the UEFI system and common attacks on UEFI malware. It then works through Rapid7’s Velociraptor tool’s capabilities for performing forensic investigations on UEFI malware-infected systems.