Files
atomic-red-team/atomics/T1152/T1152.yaml
T
2018-05-25 12:21:10 -04:00

17 lines
290 B
YAML

---
attack_technique: T1152
display_name: Launchctl
atomic_tests:
- name: Launchctl
description: |
Utilize launchctl
supported_platforms:
- macos
executor:
name: sh
command: |
launchctl submit -l evil -- /Applications/Calculator.app/Contents/MacOS/Calculator