All Detections

macOS Launch Daemon Plist Deployed

avatar
Darshan Thummar@Mighty
updated Jun 27, 2026001

Detects deployment of malicious LaunchDaemon plist files for privileged persistence

Microsoft Sentinel (KQL)