Detects attempts to enable the guest account using the sysadminctl utility
Read the full analysis on IntelFusions