CatalogLOOBins

ORCHARD · Tool

caffeinate

2 techniquesmacOSLOOBinsGPL-3.0

Fork a process

ExecutionDefense EvasionmacOS

Make caffeinate fork a process and hold an assertion that prevents idle sleep as long as that process is running

caffeinate -i /tmp/evil
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Execution, Defense Evasion
Detection
No detections at time of publishing: No detections at time of publishing

Prevent a sleep

ExecutionmacOS

Prevent a macOS from going to sleep for 4 hours (14400 seconds)

caffeinate -u -t 14400
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Execution
Detection
No detections at time of publishing: No detections at time of publishing