Defense Evasion

codesign

Create, manipulate and verify code signatures.

chflags

Changes file or directory flags

swift

Arbitrarily execute swift code from the terminal.

say

Convert text to audible speech.

sfltool

Binary to manage the Shared File List framework.

caffeinate

Prevent the system from sleeping on behalf of a utility.

mktemp

Create a temporary file or directory and return the file/directory name to stdout

log

Access system log messages from Apple Unified Logging (AUL).

mdls

List metadata attributes for the specified file.

defaults

Read, write, and delete user preference values.

spctl

Manage the security assessment policy subsystem, Gatekeeper settings, and control which …

nscurl

Download, upload, and read files.

ssh-keygen

Load unsigned dynamic libraries into the ssh-keygen binary.

csrutil

Configure or view system security policies.

plutil

Read, create or edit plist files.

textutil

Manipulate text files in various formats.

ditto

Copy files and directories while preserving file attributes and permissions.

tmutil

Manage Time Machine backups.

security

Interact with Keychain, macOS's built-in password manager.

SetFile

Set attributes of files and directories.

mdfind

Locate files using the Spotlight database.

xattr

Display and manipulate extended attributes.