Notes from the DFSP episode on Mac Autoruns

Per user

  • System preferences > Users and Groups. Click on each user you can see the autorun programs for each user.
  • /Users/USER/Library/LaunchAgents

For all users

  • /Library/LaunchDaemons
  • /Library/LaunchAgents
  • /Library/StartupItems

For system applications

  • /System/Library/LaunchAgents

Run as root tools

  • /Library/PrivilegedHelperTools

plist files

  • com.apple.*.plist are usually legitimate applications
  • Filtered list of processes:

launchctl list | grep -iv com.apple

References: