open

macOS execution T1218

Open files, URLs, or applications. Can launch applications, execute scripts via -a flag, or open URLs that trigger protocol handlers.

Binary Paths

  • /usr/bin/open

Glob Patterns

Pattern Notes
ope?
Wildcard replaces 'n'
o*n
Star matches 'pe'
op[e]n
Bracket class on third char
o?en
Wildcard replaces 'p'
ope[n]
Bracket class on last char
/usr/bin/ope?
Full path wildcard
/???/bin/o*n
Full path mixed wildcards

Pattern Tester

$

Try typing open or a full path like /usr/bin/open

YARA Rule

Auto-generated detection rule for open

      

Platform Notes

macOS-exclusive command. open -a Calculator opens an app by name. open -n -a /Applications/Utilities/Terminal.app opens a new Terminal. Can also open URLs: open https://... which triggers the default browser.

Resources

← Previous node Catalog Next → openssl