BCDEdit (bda52550-88a0-48f0-874a-600efc1f61df)
Boot Configuration Data (BCD) files provide a store that is used to describe boot applications and boot application settings.
BCDEdit is a command-line tool for managing BCD. It can be used for a variety of purposes, including creating new stores, modifying existing stores, and adding boot menu options.
Threat actors may use BCDEdit to disable recovery features[MicrosoftLearn December 15 2021]
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Gold Dupont (ebf63407-9772-4f38-93ad-48b8c9bb0bcf) | Tidal Groups | BCDEdit (bda52550-88a0-48f0-874a-600efc1f61df) | Tidal Software | 1 |