Hidden Users
Adversaries may use hidden users to hide the presence of user accounts they create or modify. Administrators may want to hide users when there are many user accounts on a given system or if they want to hide their administrative or other management accounts from other users. In macOS, adversaries can create or modify a user to be hidden through manipulating plist files, folder attributes, and user attributes. To prevent a user from being shown on the login screen and in System Preferences, adv...
BY SOURCE
PROCEDURES (6)
Auto-extracted: 3 detections for process creation monitoring
Auto-extracted: 1 detections for registry monitoring
Auto-extracted: 1 detections for registry
Auto-extracted: 1 detections for registry
Auto-extracted: 1 detections for general monitoring
Auto-extracted: 1 detections for network connection monitoring