- Jul 27, 2015
- 5,459
Very interesting and well compiled and up to date macOS IR ( Incident Response ) & Forensics resources from Mikey alias 0xmachos on twitter. I removed the paid ones as several are clearly for companies, but those are fully available to check out via the Github source. Patrick Wardles work at Objective-See I can highly recommend.
- Sarah Edwards (@iamevltwin)
- Unified Log
- Persistence
- Endpoint Security Framework (ESF)
- Kinga Kieczkowska (@kieczkowska)
- Notification Center Forensics
- Air Drop Forensics
If someone wants to learn MacOS IR/forensics what’s the best resource for that?
If someone wants to learn MacOS IR/forensics what’s the best resource for that? - macOS-IR-Forensics.md
gist.github.com