Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

BadMFS
BadMFS is a covert file system which attempts to install itself in non-partitioned
space. BadMFS provides an interface for a developer to interact with the covert file
system, similar to typical Windows API functionality. BadMFS does not encrypt data
or otherwise obscure data, it is up to the developer to protect their data, including
filenames, if necessary.
BadMFS was developed as a library to support multi-process and multi-threaded
environments. BadMFS has also been developed such that it can run as a kernel
library to a device driver or other kernel thread.

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh