macOS System Shutdown/Reboot Command Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•25

This rule detects the execution of system commands commonly used to shut down, reboot, or halt a macOS system. Adversaries may use these commands to disrupt system availability or aid in the destruction of systems.