value:  While changing binaries will invalidate digital signatures, threat actors can remove the LC_CODE_SIGNATURE command from the binary to prevent signature checks when loading dynamic libraries (DYLIB). 
name: Event Triggered Execution: Lc_Load_Dylib Addition