Talks·21 min
Brandon Dalton
Shows how the open-source Mac Monitor exposes Apple's Endpoint Security event stream to analysts, with new 2.0 features.
threat-detectionopen-sourcetool+2
Brandon Dalton
2 talks in the archive.
Filters+
1–2 of 2 talks
Talks·20 min
Brandon Dalton · Csaba Fitzl
Explains how launchd can be queried for XPC service metadata to help detect abuse of privileged macOS helper services.
macosthreat-detectionvulnerability-research+2