Potential In-Memory Download And Compile Of Payloads — Detection Rule

Detects potential in-memory downloading and compiling of applets using curl and osacompile as seen used by XCSSET malware

Read the full analysis on IntelFusions