AddSystemHard.Policies.AddSystemHard• Machine

Disable the WPBT functionality

This policy disables the Windows Platform Binary Table (WPBT) functionality, which can be used for persistence through a UEFI implant.

Policy Details

Policy Name: WPBT_Disable
Registry Key: SYSTEM\CurrentControlSet\Control\Session Manager
Value Name: DisableWpbtExecution
Supported On: At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
Policy State Values: Enabled: 1

Disabled: 0
Available Languages: en-us fr-fr