Completed
Intro
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Incident Response on macOS
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 A Mac is infected! What do you do now?
- 3 Forensic collection
- 4 IR collection
- 5 Login itens
- 6 "Hidden" login items
- 7 Kernel extensions
- 8 Login hooks
- 9 Startup itens
- 10 Processes
- 11 Install history
- 12 Safari
- 13 Firefox
- 14 Quarantine
- 15 bash config
- 16 bash history
- 17 System config
- 18 Pre-Sierra logs
- 19 Unified logs
- 20 Python's os.walk and os.stat
- 21 Other tools
- 22 Questions?
