It has been several years since I dug into it, so I can really only offer keywords: AMT[0], which is a component within ME[1]. Also see https://media.ccc.de/v/

It has been several years since I dug into it, so I can really only offer keywords: AMT[0], which is a component within ME[1]. Also see https://media.ccc.de/v/30C3_-_5380_-_en_-_saal_2_-_201312291830_-_persistent_stealthy_remote-controlled_dedicated_hardware_malware_-_patrick_stewin https://media.ccc.de/v/30C3_-_5380_-_en_-_saal_2_-_201312291... EDIT: I forgot to mention Computrace, the BIOS anti-theft service. IIRC that interacts with ME. [0] https://en.wikipedia.org/wiki/Intel_Active_Management_Technology https://en.wikipedia.org/wiki/Intel_Active_Management_Techno... [1] https://www.kernel.org/doc/Documentation/misc-devices/mei/mei.txt https://www.kernel.org/doc/Documentation/misc-devices/mei/me...