JasonPhang98 bbbfb67ab0 Merge PR #5669 from @JasonPhang98 - Extend Atomic MacOS Stealer - FileGrabber Rules ...

remove: Atomic MacOS Stealer - FileGrabber Infostealer Execution - deprecate in favor of e710a880-1f18-4417-b6a0-b5afdf7e33da
new: Atomic MacOS Stealer - Persistence Indicators
new: Atomic MacOS Stealer - FileGrabber Activity

---------
Co-authored-by: Swachchhanda Shrawan Poudel <87493836+swachchhanda000@users.noreply.github.com>
Co-authored-by: Nasreddine Bencherchali <8741929+nasbench@users.noreply.github.com>

2025-11-24 08:37:52 +05:45

..

proc_creation_macos_add_to_admin_group.yml

Merge PR #4406 from @nasbench - Multiple Updates & Additions

2023-09-07 11:42:15 +02:00

proc_creation_macos_malware_amos_filegrabber_exec.yml

Merge PR #5669 from @JasonPhang98 - Extend Atomic MacOS Stealer - FileGrabber Rules

2025-11-24 08:37:52 +05:45