EXPLORE
← Back to Explore
T1059.002

AppleScript

Adversaries may abuse AppleScript for execution. AppleScript is a macOS scripting language designed to control applications and parts of the OS via inter-application messages called AppleEvents.(Citation: Apple AppleScript) These AppleEvent messages can be sent independently or easily scripted with AppleScript. These events can locate open windows, send keystrokes, and interact with almost any open application locally or remotely. Scripts can be run from the command-line via <code>osascript /pa...

macOS
24
Detections
3
Sources
0
Threat Actors

BY SOURCE

16elastic7sigma1splunk_escu

PROCEDURES (16)

Process Creation Monitoring3 detections

Auto-extracted: 3 detections for process creation monitoring

Privilege2 detections

Auto-extracted: 2 detections for privilege

Command And Control2 detections

Auto-extracted: 2 detections for command and control

C22 detections

Auto-extracted: 2 detections for c2

Suspicious2 detections

Auto-extracted: 2 detections for suspicious

Credential2 detections

Auto-extracted: 2 detections for credential

Child Process2 detections

Auto-extracted: 2 detections for child process

Persist1 detections

Auto-extracted: 1 detections for persist

Download1 detections

Auto-extracted: 1 detections for download

Macro1 detections

Auto-extracted: 1 detections for macro

Script Execution Monitoring1 detections

Auto-extracted: 1 detections for script execution monitoring

Macro1 detections

Auto-extracted: 1 detections for macro

Persist1 detections

Auto-extracted: 1 detections for persist

Exfiltrat1 detections

Auto-extracted: 1 detections for exfiltrat

Download1 detections

Auto-extracted: 1 detections for download

Child Process1 detections

Auto-extracted: 1 detections for child process

DETECTIONS (24)