| Detect persistence via reopened application plist modification (macOS) - DET0125 (5ac0e527-2ebd-44a1-8d87-4de8463b761c) |
Detection Strategies |
Re-opened Applications - T1547.007 (e5cc9e7a-e61a-46a1-b869-55fb6eab058e) |
Attack Pattern |
1 |
| Detect persistence via reopened application plist modification (macOS) - DET0125 (5ac0e527-2ebd-44a1-8d87-4de8463b761c) |
Detection Strategies |
Analytic 0349 - AN0349 (67d1900f-9e02-4290-a14c-6d32be508d19) |
Analytics |
1 |
| Re-opened Applications - T1547.007 (e5cc9e7a-e61a-46a1-b869-55fb6eab058e) |
Attack Pattern |
Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) |
Attack Pattern |
2 |