CatalogLOOBins

ORCHARD · Tool

profiles

2 techniquesmacOSLOOBinsGPL-3.0

Collect system DEP information.

DiscoverymacOS

The following command determines whether device is DEP(Device Enrolment Program) enabled and output the DEP information.

sudo profiles show -type enrollment
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Discovery
Detection
No detections at time of publishing.: No detections at time of publishing.

Remove configuration profiles.

macOS

The following command deletes the specified profiles. An optional password used when removing a configuration profile which requires the password removal option.

profiles remove -identifier com.profile.identifier -password <password>
Evidence
Upstream reference
Environment
Local host
Compatibility
Imported from LOOBins; availability and behaviour depend on macOS version, privacy permissions and installed components. Not lab tested here.
Native
Impact
Detection
No detections at time of publishing.: No detections at time of publishing.