macOS Yara Rules


The following topic lists the Yara rules for macOS.

rule app_camera_mic_permissions {
  meta:
    description = "Application Requires Access to Camera and Microphone"
    author = "RET"
    reference = "https://objective-see.com/blog/blog_0x61.html"
    date = "2022/01/18"
  strings:
    $s1 = /(NSCameraUsageDescription|NSMicrophoneUsageDescription)/ nocase
  condition:
    $s1
}

Return to Orbital Yara Rules and System Configuration

Return to Table of Contents