Intel ME: Flash File System Explained

In our presentation, we explain in detail how ME 11.x stores its state on the flash and the other types of file systems that are supported by ME 11.x.

By Dmitry Sklyarov

Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#intel-me-flash-file-system-explained

From BlackHat https://youtu.be/mYsTBPqbya8 @BlackHatOfficialYT https://www.youtube.com/@BlackHatOfficialYT

Intel Management Engine (ME) technology has been around for over 10 years (since 2005), but it seems impossible to find any official information about ME on the Internet. Fortunately, some studies have been published in recent years; however, all of them deal with ME 10 and earlier, while modern computers implement ME 11 (introduced in 2015 for Skylake microarchitecture). In our presentation, we explain in detail how ME 11.x stores its state on the flash and the other types of file systems that are supported by ME 11.x.