While hunting for persistence is a reasonable first step for macOS, EDR functionality that delivers continuous visibility is essential for macOS detection and response.