KnockKnock
A persistence detection tool for macOS to scan for persistence mechanisms on macOS. Specific persistence locations are found in the plugins folder, e.g. LaunchItems or StartupScripts.
- from
- Malware Persistence
- added
- 2026-10-10
- likes
- 0
similar
-
KnockKnock objective-see.com
See what's persistently installed on your Mac.
-
How malware persists on macOS sentinelone.com
List of macOS persistence mechanisms.
-
BlockBlock github.com
A tool which provides continual protection by monitoring persistence locations and protects them accordingly. Similar to KnockKnock but for blocking.
-
PoisonApple github.com
Perform various persistence techniques on macOS.
-
PersistenceSniper github.com
Powershell module to hunt for persistence implanted in Windows machines.
-
PoisonApple github.com
Learn about various macOS persistence techniques by looking at the source code of PoisonApple.
Malware Persistence › Techniques > macOS: “A persistence detection tool for macOS to scan for persistence mechanisms on macOS. Specific persistence locations are found in the plugins folder, e.g. LaunchItems or StartupScripts.”