AES

Advanced Encryption Standard

ACM

Authenticated Code Module

ACPI

Advanced Configuration and Power Interface

AMT

Active Management Technology

APC

asynchronous procedure call

APIC

Advanced Programmable Interrupt Controller

ARM

Advanced RISC Machine

ATA

Advanced Technology Attachment

BCD

Boot Configuration Data

BDS

Boot Device Selection

BIOS

Basic Input/Output System

BMC

Baseboard Management Controller

BPB

BIOS Parameter Block

BPM

boot policy manifest

BSI

boot sector infector

BSoD

Blue Screen of Death

C&C

command and control

CBC

cipher block chaining

CDO

control device object

CHS

Cylinder Head Sector

CLR

Common Language Runtime

COFF

Common Object File Format

COM

Component Object Model

CSM

Compatibility Support Module

DBR

DOS Boot Record

DDoS

distributed denial of service

DGA

domain name generation algorithm

DKOM

Direct Kernel Object Manipulation

DLL

dynamic-link library

DMA

direct memory access

DRAM

dynamic random access memory

DRM

digital rights management

DXE

Driver Execution Environment

EC

Embedded Controller

ECB

Electronic Code Book

ECC

Elliptic Curve Cryptography

EDK

EFI Development Kit

EDR

Endpoint Detection and Response

EFI

Extensible Firmware Interface

ELAM

Early Launch Anti-Malware

ELF

Executable and Linkable Format/Extensible Linking Format

EPT

Extended Page Tables

FEK

file encryption key

FFS

firmware filesystem

FIT

Firmware Interface Table

FPF

field-programmable fuse

GDB

GNU Debugger

GDT

Global Descriptor Table

GPT

GUID Partition Table

GUID

global unique identifier

HAL

hardware abstraction layer

HBA

host-based architecture

HECI

Host-Embedded Controller Interface

HIPS

Host Intrusion Prevention System

HSFC

Hardware sequencing flash control

HSFS

hardware sequencing flash status

HVCI

Hypervisor-Enforced Code Integrity

IBB

initial boot block

IDT

Interrupt Descriptor Table

IOCTL

Input/Output Control

IPL

Initial Program Loader

IRP

input/output request packet

ISH

Integrated Sensor Hub

IV

initialization value

IVT

Interrupt Vector Table

KEK

key exchange key

KM

key manifest

KPP

Kernel Patch Protection

LBA

logical block address

LPE

local privilege escalation

MBR

Master Boot Record

ME

Management Engine

MFT

master file table

MIPS

millions of instructions per second

MSR

model-specific register

NDIS

Network Driver Interface Specification

NVRAM

nonvolatile random access memory

NX

no-execute

OEM

original equipment manufacturer

OSI

Open Systems Interconnection

PCH

Platform Controller Hub

PCR

Platform Configuration Register

PDO

physical device object

PE

Portable Executable

PEI

Pre-EFI Initialization

PI

platform initialization

PIC

position-independent code

PK

platform key

PKI

public key infrastructure

PMU

Power Management Unit

PnP

plug and play

PoC

proof of concept

POST

Power-On Self-Test

PPI

Pay-Per-Install

RCBA

Root Complex Base Address

RCRB

Root Complex Register Block

ROP

return-oriented programming

RVI

Rapid Virtualization Indexing

SGX

Software Guard Extensions

SLAT

Second Level Address Translation

SMC

System Management Controller

SMI

System Management Interrupt

SMM

System Management Mode

SMRAM

system management random access memory

SPC

Software Publisher Certificate

SPI

Serial Peripheral Interface

SPIBAR

SPI Base Address Register

SSDT

System Service Descriptor Table

TBB

Trusted Boot Board

TDI

Transport Driver Interface

TE

Terse Executable

TPM

Trusted Platform Module

TSA

Time Stamping Authority

UAC

User Account Control

UEFI

Unified Extensible Firmware Interface

UID

unique identifier

VBR

Volume Boot Record

VBS

virtualization-based security

VDO

volume device object

VFAT

Virtual File Allocation Table

VFS

Virtual File System

VM

virtual machine

VMM

virtual machine manager

VSM

Virtual Secure Mode

WDK

Windows Driver Kit

WHQL

Windows Hardware Quality Labs

WMI

Windows Management Instrumentation