1 5 Post Infection Analysis on macOS Hosts

Опубликовано: 14 Октябрь 2024
на канале: A Conference for Defense - ACoD
103
3

Cedric Owens
This talk covers post infection analysis as well as some simple yet effective detections for macOS hosts in an enterprise. I will discuss different macOS system artifacts that are useful for investigators, how to query these artifacts, common persistence locations, browser history/ data, log data, network information, process information, and other important pieces of information that defenders can leverage to aid during investigations.