MacOS monitoring the open source way

Let’s say a machine in your corporate fleet gets infected with malware. How would you detect it? How could you find out what happened on the machine? What did the malware do? Did it steal your browser’s passwords? What network connections did the malware make? Was it looking for crypto currency? By having good telemetry and a good host monitoring solution for your machines you can collect the cont

[braitom]

Dropbox社でのmacOSのマルウエア監視方法について。osquery、Santa、OpenBSM/AuditといったOSSを組み合わせて運用している。

[nari_ex]

これよさそうだな

[tmatsuu]

osquery、Santa、OpenBSM/Audit