← All Tactics

Persistence

8 binaries with this tactic

defaults

Read, write, and delete user preference values.

Defense EvasionDiscoveryPersistence gatekeeperfirewall

disown

Prevents a process from being terminated when a shell session or terminal is closed.

Persistence bash

ditto

Copy files and directories while preserving file attributes and permissions.

CollectionExfiltrationLateral Movement +2 filescompressrecursive

dscl

Interact with Directory Services.

DiscoveryPersistence usersnetworkconfiguration +4

launchctl

Interact with LaunchAgents and LaunchDaemons.

ExecutionPersistence bashzshoneliner

SetFile

Set attributes of files and directories.

PersistenceDefense Evasion bashzshoneliner

sysadminctl

Create/delete local accounts, guest account, enable SMB/AFP Guest access.

Initial AccessPersistenceImpact +1 userspassword

tftp

Trivial File Transfer Protocol client and server utilities.

Lateral MovementPersistenceDefense Evasion tftplaunchctlfile-transfer +2