T1547.006 Kernel Modules and Extensions in MITRE ATT&CK Explained

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

T1547.006 Kernel Modules and Extensions in MITRE ATT&CK Explained

What Is T1547.006 Kernel Modules and Extensions in MITRE ATT&CK?

T1547.006 Kernel Modules and Extensions is a technique in the MITRE ATT&CK framework under the Persistence tactic. It refers to the use of kernel modules in Linux (Loadable Kernel Modules, or LKMs) and kernel extensions in macOS (kexts) to extend the core functionality of the system’s kernel without requiring a reboot.

Article Link: T1547.006 Kernel Modules and Extensions in MITRE ATT&CK Explained

1 post - 1 participant

Read full topic



Malware Analysis, News and Indicators - Latest topics
Next Post Previous Post