"Covers programming techniques that can be used to automatically detect malicious code running on a macOS system and the strategies used by actual malware specimens to evade detection. Reviews the operating system's internals and teaches how to develop real-time monitoring software"--
"Covers programming techniques that can be used to automatically detect malicious code running on a macOS system and the strategies used by actual malware specimens to evade detection. Reviews the operating system's internals and teaches how to develop real-time monitoring software"--Hinweis: Dieser Artikel kann nur an eine deutsche Lieferadresse ausgeliefert werden.
Patrick Wardle is the founder of Objective-See, a nonprofit dedicated to creating free, open source macOS security tools and organizing the “Objective by the Sea” Apple security conference. Wardle is also the co-founder and CEO of DoubleYou, a cybersecurity startup focused on empowering the builders of Apple-focused security tools. Having worked at both NASA and the National Security Agency and having presented at countless security conferences, he is intimately familiar with aliens, spies, and talking nerdy.
Inhaltsangabe
Foreword Acknowledgments Introduction Part I: Data Collection Chapter 1. Examining Processes Chapter 2. Parsing Binaries Chapter 3. Code Signing Chapter 4. Network State and Statistics Chapter 5. Persistence Part II: System Monitoring Chapter 6. Log Monitoring Chapter 7. Network Monitoring Chapter 8. Endpoint Security Chapter 9: Muting and Authorization Events Part III: Tool Creation Chapter 10: Persistence Enumerator Chapter 11: Persistence Monitor Chapter 12: Mic and Webcam Monitor Chapter 13: DNS Monitor Chapter 14. Case Studies Index