← All Binaries

sysctl

Gets the macOS hardware information, which can be used to determine whether the target macOS host is running on a physical or virtual machine.

Discovery
Path
/usr/sbin/sysctl
Author
Cedric Owens (@cedowens)
Created
2023-04-20

Example Use Cases 1

Use sysctl to gather macOS hardware info. #

sysctl can be used to gather interesting macOS host data, including hardware information, memory size, logical cpu information, etc.

sysctl -n hw.model
Discovery T1082 bashoneliner

Detections

Resources