Tag
medium
advisory
MacOS Gatekeeper Security Bypass Detection
1 rule 1 TTPAdversaries leverage xattr and spctl utilities to bypass MacOS Gatekeeper protections, enabling the execution of untrusted or malicious binaries.
macos
defense-evasion
gatekeeper
1r
1t
medium
advisory
Apple's App Translocation Security Mechanism
2 rules 2 CVEsApple's App Translocation in macOS v10.12 mitigates Gatekeeper bypasses (CVE-2015-3715, CVE-2015-7024) by creating a read-only DMG, impacting applications accessing external resources.
ictool
app-translocation
gatekeeper
macos
security-mitigation
2r
2c