Defense Evasion
codesign
Create, manipulate and verify code signatures.
chflags
Changes file or directory flags
swift
Arbitrarily execute swift code from the terminal.
say
Convert text to audible speech.
sfltool
Binary to manage the Shared File List framework.
caffeinate
Prevent the system from sleeping on behalf of a utility.
mktemp
Create a temporary file or directory and return the file/directory name to stdout
log
Access system log messages from Apple Unified Logging (AUL).
mdls
List metadata attributes for the specified file.
defaults
Read, write, and delete user preference values.
spctl
Manage the security assessment policy subsystem, Gatekeeper settings, and control which …
nscurl
Download, upload, and read files.
ssh-keygen
Load unsigned dynamic libraries into the ssh-keygen binary.
csrutil
Configure or view system security policies.
plutil
Read, create or edit plist files.
textutil
Manipulate text files in various formats.
ditto
Copy files and directories while preserving file attributes and permissions.
tmutil
Manage Time Machine backups.
security
Interact with Keychain, macOS's built-in password manager.
SetFile
Set attributes of files and directories.
mdfind
Locate files using the Spotlight database.
xattr
Display and manipulate extended attributes.