Talks·36 min
Greg Lesnewich · Jacob Latonis
Shows how Mach-O metadata features like dylib hashes and entitlement clusters help track North Korean macOS malware families in YARA-X.
malware-analysisintelligenceopen-source+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Talks·36 min
Greg Lesnewich · Jacob Latonis
Shows how Mach-O metadata features like dylib hashes and entitlement clusters help track North Korean macOS malware families in YARA-X.