Vault 7: Projects

IOC ERB: 26
Jan 2009
8
SECRET//NOFORN
SECRET//NOFORN
IV&V Overview (cont.)
DarkSeaSkies removed itself from the EFI and
memory after it removal commands had been
performed.
The only thing left on the EFI after removal are two values:
status and count. Even though they are in a deleted state
they are still able to be seen until they’re overwritten with
new data.