Colson Wilhoit

2 talks in the archive.

Filters+

Materials

Has slidesHas repo

Difficulty

Track

Topics

Common in these results

Length

Year

1–2 of 2 talks

Sort

Talks·35 min

Colson Wilhoit

Shows how attackers can hide payloads inside Docker and Apple's container framework to evade macOS endpoint telemetry.

containerattackdetection+2

Talks·45 min

Colson Wilhoit

Shows how behavior-based rules catch macOS threats that signatures and ML models miss, using real C2 tradecraft examples.

threat-detectiondetectiondefensive-security+2