Skip to content

Instantly share code, notes, and snippets.

@helinwang
Last active April 18, 2019 06:11
Show Gist options
  • Save helinwang/efc510c3624d0330f9e45ca1c918de18 to your computer and use it in GitHub Desktop.
Save helinwang/efc510c3624d0330f9e45ca1c918de18 to your computer and use it in GitHub Desktop.
Places that mac malware could hide (auto start)
/Library/StartUpItems
/Library/LaunchAgents
/Library/LaunchDaemons
/System/Library/LaunchDaemons
/System/Library/LaunchAgents
/Users/$USER/Library/LaunchAgents
/Library/PrivilegedHelperTools
and "system preferences" -> login items
"keychain access": unkown certificates (except the ones in "System Roots")
"system preferences" -> security and privacy
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment