Suspicious MacOS Firmware Activity

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects when a user manipulates with Firmward Password on MacOS. NOTE - this command has been disabled on silicon-based apple computers.