From b5a4afedcf02ecd630d8d6a29f611cbb71d022e1 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Wed, 1 Jun 2016 09:08:09 +0200
Subject: [PATCH] HDRoot added

---
 elements/threat-actor-tools.json | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index fc9a8b4..321008e 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -444,6 +444,10 @@
     {
       "value": "Helminth backdoor",
       "refs": ["http://researchcenter.paloaltonetworks.com/2016/05/the-oilrig-campaign-attacks-on-saudi-arabian-organizations-deliver-helminth-backdoor/"]
+    },
+    {
+      "value": "HDRoot",
+      "refs": ["http://williamshowalter.com/a-universal-windows-bootkit/"]
     }
   ],
   "version" : 1,