Osacompile Execution By Potentially Suspicious Applet/Osascript — Detection Rule

Detects potential suspicious applet or osascript executing "osacompile".

Read the full analysis on IntelFusions