ATT&CK technique
View on MITRE ATT&CK →
T1553.001
Gatekeeper Bypass
Defense Impairment
7 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | MacOS Gatekeeper Bypass | production | 2026-10-02 |
| elastic | Suspicious Curl from macOS Application | production | 2026-09-18 |
| elastic | Suspicious Outbound Network Connection via Unsigned Binary | production | 2026-09-18 |
| elastic | Attempt to Disable Gatekeeper | production | 2026-09-18 |
| elastic | Gatekeeper Override and Execution | production | 2026-09-18 |
| elastic | Quarantine Attrib Removed by Unsigned or Untrusted Process | production | 2026-09-18 |
| sigma | Gatekeeper Bypass via Xattr | test | 2024-04-18 |