Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1546.014

Emond

Privilege EscalationPersistence 3 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
elastic Emond Rules Creation or Modification production 2026-09-18
elastic Suspicious Emond Child Process production 2026-09-18
sigma MacOS Emond Launch Daemon test 2021-11-27