domains / families / security / performing-firmware-malware-analysis
performing-firmware-malware-analysis
separate
'Analyzes firmware images for embedded malware, backdoors, and unauthorized
When to use
- A compromised IoT device or router needs firmware analysis to identify implanted backdoors
- Investigating UEFI/BIOS rootkits that persist across OS reinstallations
- Analyzing firmware updates for supply chain compromise or malicious modifications
- Extracting and examining embedded Linux filesystems from IoT device firmware images
- Verifying firmware integrity after a suspected hardware or firmware-level compromise
When not to use
- standard operating system malware
- OS-level malware on conventional systems
Skill page
Source