macOS Security Software Discovery via Grep

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•35

Detects the use of the 'grep' utility on macOS to search for common security software names. This activity can indicate an adversary attempting to discover installed security solutions on a compromised system.