Local Job Scheduling Process¶
On Linux and macOS systems, multiple methods are supported for creating pre-scheduled and periodic background jobs.
| id: | 7f490015-20b2-43e3-acf7-e2f2d098505d |
|---|---|
| categories: | enrich |
| confidence: | low |
| os: | macos, linux |
| created: | 7/26/2019 |
| updated: | 7/26/2019 |
MITRE ATT&CK™ Mapping¶
| tactics: | Execution, Persistence |
|---|---|
| techniques: | T1168 Local Job Scheduling |
Query¶
process where subtype.create and
process_name in ("cron", "at", "launchd")