OSACompile Run-Only Execution (b9d9b652-d8ed-4697-89a2-a1186ee680ac)

Detects potential suspicious run-only executions compiled using OSACompile

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
AppleScript - T1059.002 (37b11151-1776-4f8f-b328-30939fbf2ceb)	Attack Pattern	OSACompile Run-Only Execution (b9d9b652-d8ed-4697-89a2-a1186ee680ac)	Sigma-Rules	1
AppleScript - T1059.002 (37b11151-1776-4f8f-b328-30939fbf2ceb)	Attack Pattern	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	2