Course Overview

Foundations of macOS Security

• Deep dive into macOS security fundamentals: directories, file systems, timestamps, and common file types

• Understanding Apple Platform Security features (XProtect, Gatekeeper, TCC, SIP, etc.) and their role in malware defense

• Real-life case studies showcasing how attackers bypass these defenses

• Security checking lifecycle of a macOS binary

• Hands-on labs to solidify foundational knowledge on macOS security

Attack Simulation and Threat Detection

• Gain insights into the evolving macOS threat landscape

• Master macOS telemetry and the Endpoint Security Framework

• Learn to set up infrastructure for attack simulation and logging

• Conduct real-time threat detection using macOS endpoint telemetry

• Hands-on labs to analyze macOS APT activity and gain insights on threat hunting methodologies

Incident Response, Forensic Artifacts & Malware Investigations

• Master the process of triage data collection

• Learn system profiling techniques for identifying anomalies

• Develop skills in Apple unified log analysis

• Understand how to analyze user and application activity

• Data Theft & Malware Case Studies (RAT, Infostelaer etc.,)

• Perform in-depth persistence analysis

• Investigate process, network, and file activity

• Hands-on labs providing practical experience in incident response and artifact analysis

Course Challenge & Wrap-up

• Apply your newfound knowledge in a hands-on course challenge simulating a real-world threat scenario

• Receive valuable resources for further practice and ongoing learning