System Information Discovery Using sw_vers — Detection Rule

Detects the use of "sw_vers" for system information discovery

Read the full analysis on IntelFusions