OS X Incident Response: Scripting and Analysis

I like this book a lot; it taught me some stuff I didn't know and gave me a lot of ideas to employ in my own software (I write macOS security tools).I found the stuff on SIP exploits particularly useful, as I'd been looking for info on that for a while and not found it.There's some terminology mistakes, and there's some stuff that needs updating regarding persistence (e.g., Managed Preferences, kexts in app bundles), and of course with High Sierra on the way there's a few changes that need adding there too.I really hope the author plans to do regular updates - I'm sure that'll at least depend on sales, so if you've got any interest in this topic I hope you buy this book. We need more not less literature on malware and intrusions for the macos platform. It's growing and is likely to keep growing.

I learned a lot from this book. Not only was it full of technical information, but it was fun to read. The author walks you through a malware infection and you dissect it each step of the way, uncovering all of the artifacts.

Great book, Sans also gives you this book when you take their class for Mac-os Forensics.

As an up and coming author, Jaron did an excellent job taking his personal knowledge and translated that into a book. Sharing that information with others in written form is no easy feat. Well Done.

Good info. Well written.

If you are in the type of career that leads to this Amazon page, buy this book. It is an excellent overview of how to respond to macOS incidents. Also worth checking out the "Hacking Exposed: Hacking Macs" RSA talk from 2019. Jaron shows up in the middle of it to review techniques used in the wild against Macs, great stuff.

Scan read parts of this when it’s arrived - great contents and well written

Ce livre traite excellemment bien la problématique de la réponse à incident sur macles explications sont claires et les solutions apportées, très adaptées.A recommander