Loading ATT&CK
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
Each is its own technique in the catalogue, with its own detections.
Every one carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Windows Registry BootExecute Modification | Medium |
| Initramfs Unpacking via unmkinitramfs | Low |
| Manual Dracut Execution | Low |
| GRUB Configuration Generation through Built-in Utilities | Low |
| GRUB Configuration File Creation | Low |
| Initramfs Extraction via CPIO | Low |
| Dracut Module Creation | Low |
| Boot File Copy | Low |
| Windows EFI Volume Mount Attempt Via Mountvol | Informational |
Showing 9 of 9