Hello, I'm researching a UEFI malware (proof of concept) that was showcased at a recent BlackHat event for my masters program and I'm having trouble concretely understanding the boot process (16-bit --> 32-bit --> 64-bit), the different phases (like SEC), and finally jumping into the UEFI BIOS. Specifically, understanding the chain of trust is really important. I have some understanding just by reading the assembly but still its not always clear whats going on.
I suppose the stuff before the UEFI code is not CRAZY important but I believe having a firm grasp on that would help me when I start diving deeper into UEFI world.
Does anyone here have any good book recommendations? Or maybe resources that they've used in the past that did a good job of explaining the initial boot process?
[link] [comments]




![Halpatiokee Park [Stuart, FL]](https://preview.redd.it/yc2jvtj3cr3h1.jpg?width=140&height=140&crop=1:1,smart&auto=webp&s=b2f1cd5287a887343d041998e03125d29890059e)










English (US) ·