Talos has released a new tool to the open source community, MBRFilter, a driver that allows the MBR to be placed into a read-only mode. The MBR is a special storage location at the very beginning (Sector 0) of mass storage devices. It is used to store information related to how the storage device is partitioned, as well as details regarding the filesystem configuration on the device. The driver can be installed on 32-bit and 64-bit Windows installations. It can be used to prevent malware from writing to Sector 0 on all disk devices connected to a system.”]
Source: https://blog.talosintelligence.com/2016/10/mbrfilter.html