mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Ryan Xu
1016 B
1016 B
| ID | C0023 |
| Objective(s) | Hardware |
| Related ATT&CK Techniques | None |
| Version | 2.0 |
| Created | 14 August 2020 |
| Last Modified | 13 September 2023 |
Load Driver
Malware loads a device driver or minifilter.
Methods
| Name | ID | Description |
|---|---|---|
| Minifilter | C0023.001 | Malware starts a minifilter. |
Detection
| Tool: capa | Mapping | APIs |
|---|---|---|
| start minifilter driver | Load Driver::Minifilter (C0023.001) | FltStartFiltering |
| Tool: CAPE | Mapping | APIs |
|---|---|---|
| driver_load | Load Driver (C0023) | NtLoadDriver |