TPM sniffing – Sec Team Blog
Tags
attack-pattern: Data Firmware - T1592.003 Hardware - T1592.001 Hooking - T1617 Local Accounts - T1078.003 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Software - T1592.002 Tool - T1588.002 Hooking - T1179 Sudo - T1169 Hooking
Show in Graph
Common Information
Type Value
UUID 91362589-6618-4254-aeb1-511b43036a1a
Fingerprint e401787e18a3f3d4
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 15, 2021, 1:37 p.m.
Added to db Jan. 18, 2023, 8:51 p.m.
Last updated Nov. 17, 2024, 6:49 p.m.
Headline TPM sniffing
Title TPM sniffing – Sec Team Blog
Detected Hints/Tags/Attributes 46/1/6
Source URLs
Redirection Url
Details Source https://blog.scrt.ch/2021/11/15/tpm-sniffing/
URL Provider
Details Provider Source level domain
Details scrt.ch blog.scrt.ch
Attributes
Details Type #Events CTI Value
Details Domain 3 
st.com
Details File 1 
read_serial.py
Details File 351 
recycle.bin
Details File 52 
pagefile.sys
Details File 22 
hiberfil.sys
Details File 10 
swapfile.sys