Microsoft has added a new UEFI scanner to its Windows Defender Advanced Threat Protection (ATP) platform. Built-in protection against firmware attacks is already included in Windows 10 Secured-core PCs since October 2019. The new scanner uses multiple components including a UEFI anti-rootkit which scans the firmware through the Serial Peripheral Interface (SPI) flash. Microsoft: “Security operations teams can use this new level of visibility
Source: security

