0:00 / 0:00
#macos#endpointsecurityframework#esf
Leveraging the Apple ESF for Behavioral Detections
Black Hat
281K subscribers • 47 videos on Hallway • Conference channel
- One of the most-watched uploads on Black Hat, a conference or university channel Hallway lists. Nobody has recommended it in the communities yet, so it ranks below community picks.
Intermediate. Assumes working knowledge.
15K views3 years ago
SecuritySystems programmingOperating systemsWeb and application security
An explanation of how to use the Apple Endpoint Security Framework for behavioral-based detections on macOS.
Since its 2019 introduction in macOS Catalina, we have used the Apple Endpoint Security Framework (ESF) as an event source to fuel behavioral-based detections. In this talk, we will focus on the difference between the old and new ways of detecting malicious activity on macOS, speaking to why both are relevant today. We will break down how we use ESF data, both in its basic form, as well as a pivot point to perform more advanced detections. Presented by Jaron Bradley & Matt Benyo Full Abstract & Presentation Materials: blackhat.com/us-22/briefings/schedule/#leveraging-the-apple-…Why it's here
A top upload from a listed channelBlack Hat is on Hallway's list of conference and university channels, and this upload is one of its most-watched talks or lectures. Nobody has recommended it in the communities yet, so it ranks below community picks.