CmdID

CmdID / Commands

sw_vers

Print macOS operating system version information. tldr-pages

On macOS 1 Sigma rule name it

Opens CmdID with your command. It is read in your browser and sent nowhere.

macOS

from tldr-pages, CC BY 4.0

Print all available information (OS name, version number, and build)

sw_versIdentify

Print only the version number of the operating system

sw_vers -productVersionIdentify

Trips 1 Sigma rule: mediumSystem Information Discovery Using sw_vers by Joseliyo Sanchez, @Joseliyo_Jstnk

Print only the build identifier

sw_vers -buildVersionIdentify

Trips 1 Sigma rule: mediumSystem Information Discovery Using sw_vers by Joseliyo Sanchez, @Joseliyo_Jstnk

What detects it

Sigma process creation rules that name sw_vers
mediumSystem Information Discovery Using sw_versJoseliyo Sanchez, @Joseliyo_Jstnk