Launch Agent/Daemon Execution Via Launchctl (ae9d710f-dcd1-4f75-a0a5-93a73b5dda0e)

Detects the execution of programs as Launch Agents or Launch Daemons using launchctl on macOS.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Launch Daemon - T1543.004 (573ad264-1371-4ae0-8482-d2673b719dba)	Attack Pattern	Launch Agent/Daemon Execution Via Launchctl (ae9d710f-dcd1-4f75-a0a5-93a73b5dda0e)	Sigma-Rules	1
Launch Agent/Daemon Execution Via Launchctl (ae9d710f-dcd1-4f75-a0a5-93a73b5dda0e)	Sigma-Rules	Launch Agent - T1543.001 (d10cbd34-42e3-45c0-84d2-535a09849584)	Attack Pattern	1
Launch Agent/Daemon Execution Via Launchctl (ae9d710f-dcd1-4f75-a0a5-93a73b5dda0e)	Sigma-Rules	Launchctl - T1569.001 (810aa4ad-61c9-49cb-993f-daa06199421d)	Attack Pattern	1
Launch Daemon - T1543.004 (573ad264-1371-4ae0-8482-d2673b719dba)	Attack Pattern	Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5)	Attack Pattern	2
Create or Modify System Process - T1543 (106c0cf6-bf73-4601-9aa8-0945c2715ec5)	Attack Pattern	Launch Agent - T1543.001 (d10cbd34-42e3-45c0-84d2-535a09849584)	Attack Pattern	2
System Services - T1569 (d157f9d2-d09a-4efa-bb2a-64963f94e253)	Attack Pattern	Launchctl - T1569.001 (810aa4ad-61c9-49cb-993f-daa06199421d)	Attack Pattern	2