CatalogLOOBins

ORCHARD · Tool

kextstat

1 techniquemacOSLOOBinsGPL-3.0

List kernel extensions

DiscoverymacOS

Uses kexstat showloaded to display kernel extensions and address in kernel memory it has been loaded

kexstat
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing: No detections at time of publishing