Pre-OS Boot
Technique · ATTACK:enterprise:T1542
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1542",
"title": "Pre-OS Boot",
"type": "Technique",
"source_url": "https://attack.mitre.org/techniques/T1542",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--7f0ca133-88c4-40c6-a62f-b3083a7fbc2e",
"external_id": "T1542",
"domain": "enterprise",
"created": "2019-11-13T14:44:49.439Z",
"modified": "2026-05-12T15:12:00.662Z",
"version": "2.0",
"aliases": [
],
"tactics": [
"stealth",
"persistence"
],
"source_references": [
{
"source_name": "Wikipedia Booting",
"url": "https://en.wikipedia.org/wiki/Booting"
}
]
}Explicit source assertions (10)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1035 → mitigates → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--00e2899a-beb7-448a-b003-a8b67e0b0daf
ATTACK:enterprise:T1542.003 → subtechnique-of → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--05d0c3fe-f210-4dd1-a082-45ac8f0c1c47
ATTACK:enterprise:M1047 → mitigates → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--10f92e54-e986-423e-8fcb-cc2f420e2421
ATTACK:enterprise:M1051 → mitigates → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3b2b3dfd-4126-4b04-b8a7-381b5cb61dbf
ATTACK:enterprise:T1542.005 → subtechnique-of → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a468fd3d-b1a8-4d1f-b19b-8073a80a0041
ATTACK:enterprise:T1542.002 → subtechnique-of → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b05016f4-950a-40f4-9fe2-e924d7455c28
ATTACK:enterprise:M1026 → mitigates → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b2651406-190a-4341-8d76-f9c25f66077b
ATTACK:enterprise:T1542.004 → subtechnique-of → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e07acc2b-6a92-423e-85be-a9caed4a8ee6
ATTACK:enterprise:M1046 → mitigates → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--efb4adc8-b0a0-4562-a8c7-d0fe70c207be
TCG Trusted Platform Module · TechNet Secure Boot ProcessATTACK:enterprise:T1542.001 → subtechnique-of → ATTACK:enterprise:T1542
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ff0d8860-9790-4a15-93c7-17f01d63b2ad