Launch_Daemon.md

Launch Daemon

MITRE ATT&CK Technique: T1160

Place the following file (com.example.hello) in /System/Library/LaunchDaemons or /Library/LaunchDaemons

  <?xml version="1.0" encoding="UTF-8"?>
  <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
  <plist version="1.0">
  <dict>
      <key>Label</key>
      <string>com.example.hello</string>
      <key>ProgramArguments</key>
      <array>
          <string>hello</string>
          <string>world</string>
      </array>
      <key>KeepAlive</key>
      <true/>
  </dict>
  </plist>