Local Job Scheduling Paths¶
On Linux and macOS systems, multiple methods are supported for creating pre-scheduled and periodic background jobs.
id: | 01fa72dc-5ce4-443b-96f9-703edfeefa5d |
---|---|
categories: | enrich |
confidence: | low |
os: | macos, linux |
created: | 7/26/2019 |
updated: | 7/26/2019 |
MITRE ATT&CK™ Mapping¶
tactics: | Execution, Persistence |
---|---|
techniques: | T1168 Local Job Scheduling |
Query¶
file where wildcard(file_path, "/etc/crontab", "/etc/cron.d", "*LaunchDaemons*")