MacOS Threat Hunting Training

Join us for The Mitten Mac Threat Hunting Training. The only course dedicated to teaching how to threat hunt macOS data at the endpoint level!

Whether you’re new to threat hunting or an experienced threat hunter, this three day course will bring an in-depth and hands on experience to those looking to deep dive into using macOS internals to their advantage for threat hunting. Learn how to use the less commonly used artifacts to hunt down malicious activity in your environment.

This course uses simulated attack data collected with the Apple Endpoint Security API and teaches attendees how to connect the dots to determine what took place on the system.

Topics are discussed in presentation form and then applied via hands on labs. Among the different topics explored are

• Exploring the process tree and understanding process creation
• Understanding the complications of XPC
• Tracing the steps of real malware samples and determining the scope of the attack
• Hunting using the lesser explored pid values
• Hunting using macOS and Unix specific technologies
• …And much more