AirDrop V1-V3 Exploitation via Sharing/Continuity Daemon Crash
Detects unexpected crashes of critical macOS system processes such as sharingd, nsurlsessiond, airplayd, AirPlayXPCHelper, and NetAuthSysAgent. Frequent crashing of these components can indicate instability or potentially malicious attempts to interfere with system services.
Microsoft Sentinel (KQL)
