Meow RAT LaunchAgent/LaunchDaemon Persistence via com.apple.accountsd.plist
Detects the creation or modification of suspicious LaunchAgent or LaunchDaemon plist files on macOS. Specifically looks for files named 'com.apple.accountsd.plist' or files within a hidden directory '.com.apple.accountsd' in common LaunchAgent/Daemon paths. This pattern is often used by malware for persistence.
Microsoft Sentinel (KQL)
