macOS persistence, LaunchAgents and Beyond
Provides macOS persistence, LaunchAgents and Beyond and evaluates key implications for security practitioners.
Summary
macOS persistence techniques using LaunchAgents and related mechanisms.
Related talks
Security Fest·47 min
Csaba Fitzl [Security Fest 2022]
Explores 10 macOS persistence techniques and evaluates key implications for security practitioners.
macos-persistencepersistence-techniquesmacos+1
BSides Canberra 2025·29 min
Industry experts analyze emerging threats surrounding Is this binary Naughty or Nice? How Google leverages ML and Santa to detect persistence on MacOS.
persistencemacosthi+2
Main Stage·41 min
Shang-De Jiang · Dong-Yi Ye · Tung-lin Lee
Demonstrates techniques for stealing Microsoft Primary Refresh Tokens (PRT) and cookies on macOS endpoints to achieve persistent access to Entra ID cloud resources.
macosazureprt+2