Skip to content
Threat Feed

Tag

Mountvol

1 brief RSS
high advisory

Windows EFI Volume Mount Attempt via Mountvol

Detection of attempts to mount the EFI volume on Windows systems using mountvol.exe, potentially leading to system compromise.

Splunk Enterprise +2 efi mountvol windows persistence defense-evasion
2r 3t