Skip to content

The Hidden Treasure of Crash Reports?

Patrick Wardle

Presenters detail vulnerability discovery and exploitation in The Hidden Treasure of Crash Reports?.

Summary

Black Hat USA 2024 briefing by Patrick Wardle on analyzing macOS .ips crash reports stored in DiagnosticReports directories. Shows how crash telemetry can reveal malware infections, exploitation attempts, and exploitable bugs, including ARM64 disassembly from thread state and analysis applied to the CrowdStrike kernel crash.

Related talks