Completed
Startup itens
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Incident Response on macOS
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 A Mac is infected! What do you do now?
- 3 Forensic collection
- 4 IR collection
- 5 Login itens
- 6 "Hidden" login items
- 7 Kernel extensions
- 8 Login hooks
- 9 Startup itens
- 10 Processes
- 11 Install history
- 12 Safari
- 13 Firefox
- 14 Quarantine
- 15 bash config
- 16 bash history
- 17 System config
- 18 Pre-Sierra logs
- 19 Unified logs
- 20 Python's os.walk and os.stat
- 21 Other tools
- 22 Questions?
