Local Job Scheduling Paths

On Linux and macOS systems, multiple methods are supported for creating pre-scheduled and periodic background jobs.

id:01fa72dc-5ce4-443b-96f9-703edfeefa5d
categories:enrich
confidence:low
os:macos, linux
created:7/26/2019
updated:7/26/2019

MITRE ATT&CK™ Mapping

tactics:Execution, Persistence
techniques:T1168 Local Job Scheduling

Query

file where wildcard(file_path, "/etc/crontab", "/etc/cron.d", "*LaunchDaemons*")

Contributors