Impact
5 binaries with this tactic
lsregister
Interact with the macOS Launch Services database.
DiscoveryImpact
pkill
Kill processes by name or pattern.
Defense EvasionImpact processesevasionsigkill +3
profiles
List and remove configuration profiles.
DiscoveryImpact oneliner
sysadminctl
Create/delete local accounts, guest account, enable SMB/AFP Guest access.
Initial AccessPersistenceImpact +1 userspassword
tmutil
Manage Time Machine backups.
ImpactCollectionPrivilege Escalation +1 backupdeleterestore +1