← All Tactics

Privilege Escalation

3 binaries with this tactic

notifyutil

Monitor and post Darwin notifications for inter-process communication and system event monitoring.

DiscoveryCollectionCommand and Control +2 monitoringsurveillancesystem-events +10

osascript

Execute AppleScripts and other OSA language scripts and commands.

CollectionCredential AccessDiscovery +4 clipboardbashoneliner +15

tmutil

Manage Time Machine backups.

ImpactCollectionPrivilege Escalation +1 backupdeleterestore +1