Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

FlexibleFerret LaunchAgent Persistence Detection

Effy Elden@ineffyble

•updated Nov 26, 2025•1•0•45

Detects creation of FlexibleFerret persistence mechanism via LaunchAgent plist in macOS.

Sigma

Tags

TA0003 - Persistence T1543.001 - Launch Agent TA0004 - Privilege Escalation File Event macOSattack.persistenceattack.t1543.001attack.t1547.011

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?