Jai Musunuri and Erik Martin
How to Learn from Adversaries as they Test Attack Strategies
As of macOS 10.12 Sierra, incident responders have been able to turn to a new endpoint log source for investigative answers: the Apple Unified Log (AUL). This log format, standardized across the Apple[…]