{
 "description": "Evidence-bound MITRE ATT&CK techniques observed in ctipilot.ch entries referencing MSI Afterburner RTCore64.sys driver flaw, long patched \u2014 recorded only as one of the two vulnerable drivers Cisco Talos observed the SPECTRE implant loading to obtain a kernel read/write primitive for unlinking EDR notification callbacks. Not a new or in-window disclosure.. Score = number of published entries mapping the technique. Pinned dataset: ATT&CK v19.2.",
 "domain": "enterprise-attack",
 "gradient": {
  "colors": [
   "#ffe766",
   "#ff6666"
  ],
  "maxValue": 1,
  "minValue": 0
 },
 "hideDisabled": false,
 "layout": {
  "layout": "side",
  "showID": true,
  "showName": true
 },
 "legendItems": [],
 "metadata": [
  {
   "name": "source",
   "value": "ctipilot.ch"
  },
  {
   "name": "entity",
   "value": "CVE-2019-16098"
  },
  {
   "name": "attack_version",
   "value": "19.2"
  }
 ],
 "name": "MSI Afterburner RTCore64.sys driver flaw, long patched \u2014 recorded only as one of the two vulnerable drivers Cisco Talos observed the SPECTRE implant loading to obtain a kernel read/write primitive for unlinking EDR notification callbacks. Not a new or in-window disclosure. \u2014 ctipilot.ch coverage",
 "sorting": 3,
 "techniques": [
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1003.002"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1014"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1027"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1055.004"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1055.012"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1068"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1071.001"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1134.001"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1190"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1555.003"
  },
  {
   "comment": "entries: 2026-08-23/spectre-uat-10147-byovd-edr-callback-unlink",
   "score": 1,
   "techniqueID": "T1685"
  },
  {
   "showSubtechniques": true,
   "techniqueID": "T1003"
  },
  {
   "showSubtechniques": true,
   "techniqueID": "T1055"
  },
  {
   "showSubtechniques": true,
   "techniqueID": "T1071"
  },
  {
   "showSubtechniques": true,
   "techniqueID": "T1134"
  },
  {
   "showSubtechniques": true,
   "techniqueID": "T1555"
  }
 ],
 "versions": {
  "attack": "19",
  "layer": "4.5",
  "navigator": "5.1.0"
 }
}