CIRCL Automatic Launch Object Detection 2015-01-23

Current Mac OS X malware often persists and automatically starts by using the built-in launch system [1]. This tool makes use of Automatic Folder Actions [2] in order to create a very basic but effective way of monitoring the addition of new launch...