T1561.002 Disk Structure Wipe
Sub-technique of T1561 Disk Wipe
Adversaries may corrupt or wipe the disk data structures on a hard drive necessary to boot a system; targeting specific critical systems or in large numbers in a network to interrupt availability to system and network resources. Adversaries may attempt to render the system unable to boot by overwriting critical data located in structures such as the master boot record (MBR) or partition…
Who uses it · with stories on Jábega
Sigma rules to hunt it
- Cisco File Deletionmediumtest · cisco
Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.