Rule Info
Name
Launch Agent/Daemon Execution Via Launchctl
Author
Pratinav Chandra
Description
Detects the execution of programs as Launch Agents or Launch Daemons using launchctl on macOS.
Date
2024-05-13 00:00:00
Modified
None
Id
ae9d710f-dcd1-4f75-a0a5-93a73b5dda0e
Tags
attack.execution attack.persistence attack.t1569.001 attack.t1543.001 attack.t1543.004 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
pratinavchandra
Merge PR #4782 from @pratinavchandra - Add `Launch Agent/Daemon Execution Via Launchctl`
2024-05-13
Scan your endpoints, forensic images or collected files with our portable scanner THOR