mirror of
https://github.com/chainguard-dev/osquery-defense-kit
synced 2025-01-20 20:40:43 +00:00
9 lines
254 B
SQL
9 lines
254 B
SQL
-- Retrieves all the daemons that will run in the start of the target OSX system.
|
|
--
|
|
-- interval: 3600
|
|
-- platform: darwin
|
|
-- value: Identify malware that uses this persistence mechanism to launch at system boot
|
|
-- version: 1.4.5
|
|
|
|
select * from launchd;
|