Local System Accounts Discovery - MacOs

SigmaHQ Detections@sigmaHQ

•updated Jul 8, 2026•0•0•3

Detects enumeration of local system accounts on MacOS systems. This can be used by attackers to identify accounts for lateral movement or privilege escalation.