System Shutdown/Reboot - MacOs — Detection Rule

Adversaries may shutdown/reboot systems to interrupt access to, or aid in the destruction of, those systems.

Read the full analysis on IntelFusions