Display the status of loaded kernel extensions (kexts)
kextstat kextstat Sandbox: execFile · Timeout: 30s
discovery.enumerate List kernel extensions: Uses kexstat showloaded to display kernel extensions and address in kernel memory it has been loaded
kexstat | Type | Rule / Indicator |
|---|---|
| other | No detections at time of publishing |
Deprecated tool in favor of kmutil. Lists loaded kernel extensions