ark hartescout

## macOS-IR-Forensics.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              1 star
            
          
                hartescout
                / macOS-IR-Forensics.md
            
            
              Created
              August 3, 2021 16:24
                — forked from 0xmachos/macOS-IR-Forensics.md
            
              
                If someone wants to learn MacOS IR/forensics what’s the best resource for that?
              
          
      View macOS-IR-Forensics.md
  
      
Sarah Edwards (@iamevltwin)

mac4n6.com
SANS FOR518: Mac and iOS Forensic Analysis and Incident Response
Apple Pattern of Life Lazy Output'er


Unified Log

Howard Oakley @howardnoakley

Unified log: 1 why, what and how
Unified log: 2 content and extraction


Unified log: 3 finding your way