hunting-bootkits-in-efi-system-partition

SKILLWorkflowcommunity
v0.0.0adriannoesMITUpdated 1d agoSource →

Baseline the EFI System Partition and hunt malicious EFI binaries (ESPecter, BlackLotus, Bootkitty, Glupteba) by mounting the ESP, hashing and verifying boot loaders, scanning with YARA, and detecting anomalous non-EFI files.

Community-submitted skill. Not yet reviewed by the Forge team. Full prompt content may not be available.Request review →
48Repo stars
1Clients
1Formats
1d agoLast update
Skill
Authoradriannoes
Version0.0.0
LicenseMIT
CategoryWorkflow
Formatsskill.md
PromptNot published
Compatibility
Claude✓ Supported
Cursor—
Copilot—
ChatGPT—
Gemini—
About

Baseline the EFI System Partition and hunt malicious EFI binaries (ESPecter, BlackLotus, Bootkitty, Glupteba) by mounting the ESP, hashing and verifying boot loaders, scanning with YARA, and detecting anomalous non-EFI files.

Keywords
skillclaude