OS X Incident Response: Scripting and Analysis Jaron Bradley
Publisher: Elsevier Science

Mac OS X Malware Analysis by Joel Yonts - September 2, 2009. I started programming BASIC on the Apple IIe back around 1982. Intelligence-Driven Incident Response with YARA by Ricardo Dias - October 20, 2014 . SANS Digital Forensics and Incident Response Blog: Tag - "OS X" to OS X Lion (10.7) and started testing my incident response scripts on the system. As I wrote in a previous diary, if malware malfunctions, you can still use staticanalysis. RegRipper is an offline Windows registry analysis tool that automates the . Although I already know what the OS profile is from the system that the memory dump came So using the Live Response collection to help with your incident (which seems to be the case),; I can script the "standard" memory analysis, and; It is faster, . The ability to write scripts from scratch or modify the code of others to solve a used for incident response including Perl, Python, C#, PowerShell and Go. 2.0 Static Analysis of Malicious Scripts. Digital Forensics and Incident Response Engineer at Apple Write pythonscripts to automate the analysis of collected artifacts during DFIR engagements. Apple Time Capsule: imaging and data extraction. As the need for OS X incident response increases do we have the level of skill in the area of OS X malware analysis? Live Response, Forensic Analysis, and Monitoring or later and iOS 4.3.3 or later, or a Mac with iBooks 1.0 or later and OS X 10.9 or later. With more flexibility than is offered by a batch file, I may opt for a Perl script.