Updated today Sherlog

Login Window: Scripts

com.apple.mcxloginscripts

The payload that configures scripts to run at login and logout.

macOS

macOS 10.7+combined

Configuration Keys (4)

Key	Type	Title	Description	Default	Range
`loginscripts` An array of one or more dictionaries of scripts to run at user login time. Range: 1 – —	array	Login script	An array of one or more dictionaries of scripts to run at user login time.	—
`skipLoginHook` If 'true', the system doesn't execute the login scripts during login. Default: false	boolean	Execute the Mac computer's LoginHook script	If 'true', the system doesn't execute the login scripts during login.	false	—
`logoutscripts` An array of one or more dictionaries of scripts to run at user logout time. Range: 1 – —	array	Logout script	An array of one or more dictionaries of scripts to run at user logout time.	—
`skipLogoutHook` If 'true', the system doesn't execute the logout scripts during logout. Default: false	boolean	Execute the Mac computer's LogoutHook script	If 'true', the system doesn't execute the logout scripts during logout.	false	—
`ScriptsItems`required A dictionary of login scripts.	dict	Login Script	A dictionary of login scripts.	—	—
`filename`required The filename for display purposes.	string	Name	The filename for display purposes.	—	—
`filedata`required The UTF-8 encoded data object representing the executable script.	data	Script	The UTF-8 encoded data object representing the executable script.	—	—
`ScriptsItems`required A dictionary of login scripts.	dict	Logout Script	A dictionary of login scripts.	—	—
`filename`required The filename for display purposes.	string	Name	The filename for display purposes.	—	—
`filedata`required The UTF-8 encoded data object representing the executable script.	data	Script	The UTF-8 encoded data object representing the executable script.	—	—