Adversaries may gain persistence and elevate privileges by executing malicious content triggered by the Event Monitor Daemon (emond).

Tactics
TA0003 TA0004

Sub-technique of
T1546


See: MITRE ATT&CK