Launch Agent/Daemon Execution Via Launchctl

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•0

Detects the execution of programs as Launch Agents or Launch Daemons using launchctl on macOS.