Threat Hunting Training – JNUC Edition

The Mitten Mac is proud to announce the first ever in person Threat Hunting Training course dedicated to macOS!

Whether you’re new to threat hunting or an experienced threat hunter this two day course will bring an in-depth and hands on experience to those looking to deep dive into using macOS internals to their advantage for threat hunting. Learn how to use the less commonly used artifacts to hunt down malicious activity in your environment.

This course uses simulated attack data collected with the Apple Endpoint Security Framework and teaches attendees how to connect the dots to determine what took place on the system.

Topics are discussed in presentation form and then applied via hands on labs. Among the different topics explored are

• Exploring the process tree and understanding process creation
• Understanding the complications of XPC
• Tracing the steps of real malware samples and determining the scope of the attack
• Hunting using the lesser explored pid values
• Hunting using macOS and Unix specific technologies
• …And much more