Threat video1:00
Intel Slim Bootloader Six Flaws: Detection & IOCs
Six Slim Bootloader flaws in Intel's advisory allow privilege escalation, DoS or data corruption. Get 9 detection rules, 11 IOCs and a free Splunk SPL rule.
Read the full threat intel for Intel Slim Bootloader Six Flaws: Detection & IOCs →
Chapters
- 0:00The hookIntel disclosed six boot firmware flaws.
- 0:04The storyIntel published the advisory in November.
- 0:11Attack pathIntel reports flaws needing local or physical access.
- 0:26AttributionNo threat actor is attributed.
- 0:31Indicators of compromise7 indicators to hunt: 1 URL, 1 hash and 1 file name, and more.
- 0:38MITRE ATT&CK techniques2 ATT&CK techniques, from persistence to impact.
- 0:43Remediation2 steps now: Update Intel Slim Bootloader to commit.
- 0:50Detection rules9 detection rules, in SPL, KQL and Sigma.
Transcript
0:00Intel disclosed six boot firmware flaws.
0:05Intel published the advisory in November.
0:07The fix was committed in July.
0:11Intel reports flaws needing local or physical access.
0:15Some allow privilege escalation in boot firmware.
0:18Others corrupt data or cause denial of service.
0:21Update to the July build or later.
0:27No threat actor is attributed. Confidence: low.
0:317 indicators to hunt: 1 URL, 1 hash and 1 file name, and more.
0:382 ATT&CK techniques, from persistence to impact.
0:432 steps now: Update Intel Slim Bootloader to commit.
0:519 detection rules, in SPL, KQL and Sigma.
0:56Threadlinqs. The unified security engineering platform.