Create, manipulate and verify code signatures.
codesigncodesignSandbox: execFile · Timeout: 30s
security.defenseevasion.bypass Ad-hoc codesigning an app bundle: This command forcefully re-signs the MyApp.app application with an ad-hoc signature, applying the signature deeply to all nested code within the app
codesign --force --deep -s - MyApp.app| Type | Rule / Indicator |
|---|---|
| other | https://github.com/jamf/jamfprotect/blob/main/custom_analytic_detections/adhoc_codesigning.yaml Jamf Protect: Detect ad-hoc codesigning activity |
The codesign command is used to create, check, and display code signatures, as well as inquire into the dynamic status of signed code in the system.