Mac OS Incident Response and Analysis : A Guide to Detecting and Analyzing Compromised Mac OS Systems - Jaron Bradley

Mac OS Incident Response and Analysis

A Guide to Detecting and Analyzing Compromised Mac OS Systems

By: Jaron Bradley

Paperback | 6 May 2016 | Edition Number 1

At a Glance

Paperback


Limited Stock Available

RRP $76.95

$60.50

21%OFF

or 4 interest-free payments of $15.13 with

 or 
In Stock and Aims to ship in 1-2 business days

OS X Incident Response: Scripting and Analysis

is written for analysts who are looking to expand their understanding of a lesser-known operating system. By mastering the forensic artifacts of OS X, analysts will set themselves apart by acquiring an up-and-coming skillset.

Digital forensics is a critical art and science. While forensics is commonly thought of as a function of a legal investigation, the same tactics and techniques used for those investigations are also important in a response to an incident. Digital evidence is not only critical in the course of investigating many crimes but businesses are recognizing the importance of having skilled forensic investigators on staff in the case of policy violations.

Perhaps more importantly, though, businesses are seeing enormous impact from malware outbreaks as well as data breaches. The skills of a forensic investigator are critical to determine the source of the attack as well as the impact. While there is a lot of focus on Windows because it is the predominant desktop operating system, there are currently very few resources available for forensic investigators on how to investigate attacks, gather evidence and respond to incidents involving OS X. The number of Macs on enterprise networks is rapidly increasing, especially with the growing prevalence of BYOD, including iPads and iPhones.

Author Jaron Bradley covers a wide variety of topics, including both the collection and analysis of the forensic pieces found on the OS. Instead of using expensive commercial tools that clone the hard drive, you will learn how to write your own Python and bash-based response scripts. These scripts and methodologies can be used to collect and analyze volatile data immediately.

For online source codes, please visit:

https://github.com/jbradley89/osx_incident_response_scripting_and_analysis

  • Focuses exclusively on OS X attacks, incident response, and forensics
  • Provides the technical details of OS X so you can find artifacts that might be missed using automated tools
  • Describes how to write your own Python and bash-based response scripts, which can be used to collect and analyze volatile data immediately
  • Covers OS X incident response in complete technical detail, including file system, system startup and scheduling, password dumping, memory, volatile data, logs, browser history, and exfiltration

More in Technology in General

Thing Explainer : Complicated Stuff in Simple Words - Randall Munroe
The Aircraft Book : The Definitive Visual History - DK

RRP $55.00

$36.95

33%
OFF
First Knowledges Innovation : Knowledge and Ingenuity - Ian J McNiven
Longitude - Dava Sobel

Paperback

RRP $22.99

$21.35

Exactly : How Precision Engineers Created the Modern World - Simon Winchester
Steve Jobs : The Exclusive Biography - Walter Isaacson

RRP $24.99

$21.25

15%
OFF
Fuzzy Methods for Assessment and Decision Making - Michael Gr. Voskoglou

RRP $264.95

$199.95

25%
OFF
Polymer Gears - Sabu Thomas

Paperback

RRP $520.95

$393.25

25%
OFF
Nomograms for Design and Operation of Cement Plants - S. P. Deolalkar
Inverse Design Methods for the Built Environment - Qingyan Chen
Manual of Environmental Management - Adrian Belcham

RRP $96.99

$75.50

22%
OFF