DIFF.BLOG
New Following Discover Jobs
More
Top Writers Suggest a blog Upvotes plugin
Report bug Contact About Privacy
Sign up
Topics
Follow your own topics →
Menu
New Following Discover Jobs Top Writers
More
Suggest a blog Upvotes plugin Report bug Contact About
Sign up
Privacy Policy
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS

Below the OS, UEFI bootkits, firmware implants, and the artifacts Volatility will never find

· · June 12, 2026, 7:09 a.m.
Security dfir Firmware Security uefi Cybersecurity dfir Firmware malware-analysis
Summary
This blog post discusses the challenges faced by standard Digital Forensics and Incident Response (DFIR) tools when dealing with UEFI firmware and bootkits. It explores the remnants and artifacts left by such implants and provides guidance on where to look for indicators of compromise when traditional tools fail.
Read full post on andreafortuna.org →
MORE POSTS LIKE THIS
How Pass-ta-key attacks steal passkeys instead of passwords
andreafortuna · Aug 10, 2026
Security dfir
Long-Lived Vulnerability in Microsoft Secure Boot
Bruce Schneier · Jul 29, 2026
Firmware microsoft
Ivanti patches two more CVEs amid highly unusual Connect Secure exploitation
Thestack · Oct 30, 2026
Security Ivanti
Stuxnet reverse engineered code posted to GitHub
Adafruit Industries Blog · Sep 8, 2026
reverse engineering Security
security: TerminalFix campaign deploys a reverse tunnel through multistage intrusion
Sujith Quintelier · Aug 29, 2026
Cybersecurity Intrusion Detection
Beyond Context Windows: When Malware Stops Fitting into Naive Automated Analysis
JP Dias · Jun 13, 2026
Phishing vbs
Discover more posts →
AUTHOR
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub Continue with Google
By continuing, you agree to our Privacy Policy.