Record · corpus.blog/posts/01a087b8-13e4-70aa-b468-13e2b32461be

EDR Evasion with Lesser-Known Languages & macOS APIs

oliviagallucci.com · published 17 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at oliviagallucci.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 39
Words captured: 3,692

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.sentinelone.com/blog/macos-payloads-7-prevalent-and-emerging-obfuscation-techniques/

sentinelone.com

https://www.sentinelone.com/labs/macos-nimdoor-dprk-threat-actors-target-web3-and-crypto-platforms-with-nim-based-malware/

sentinelone.com

https://blog.polyswarm.io/nimdoor-macos-malware

blog.polyswarm.io

Why Packers are Rare and Sus on macOS Read at the source ↗

oliviagallucci.com

https://developer.apple.com/documentation/endpointsecurity

developer.apple.com

https://www.huntress.com/blog/endpoint-security-in-a-macos-world

huntress.com

https://eclecticlight.co/2025/09/23/inside-the-unified-log-1-goals-and-architecture/

eclecticlight.co

https://www.outflank.nl/blog/2024/06/03/edr-internals-macos-linux/

outflank.nl

https://eclecticlight.co/2018/11/07/rip-xprotect-and-mrt/

eclecticlight.co

https://www.sentinelone.com/blog/malware-can-easily-defeat-apples-macos-security/

sentinelone.com

https://www.linkedin.com/in/jclovessecurity

linkedin.com

https://eclecticlight.co/2026/01/11/last-week-on-my-mac-does-your-laptop-mac-get-scanned-for-malware/

eclecticlight.co

https://nixhacker.com/security-protection-in-macos-2/

nixhacker.com

https://www.huntress.com/blog/built-in-macos-security-tools

huntress.com

https://support.apple.com/en-lamr/guide/security/sec469d47bd8/web

support.apple.com

https://www.sentinelone.com/blog/macos-adload-prolific-adware-pivots-just-days-after-apples-xprotect-clampdown/

sentinelone.com

https://eclecticlight.co/2020/10/23/mrt-what-do-we-know-about-it/

eclecticlight.co

https://www.microsoft.com/en-us/security/blog/2025/01/13/analyzing-cve-2024-44243-a-macos-system-integrity-protection-bypass-through-kernel-extensions/

microsoft.com

https://oliviagallucci.com/?post_type=post&p=75588

oliviagallucci.com

https://www.linkedin.com/pulse/new-attack-method-bypasses-misconfigured-sentinelones-topre/

linkedin.com

https://sveinbjorn.org/platypus

sveinbjorn.org

https://www.sentinelone.com/blog/readerupdate-reforged-melting-pot-of-macos-malware-adds-go-to-crystal-nim-and-rust-variants/

sentinelone.com

https://medium.com/@mathias.fuchs/ghosts-in-the-endpoint-how-attackers-evade-modern-edr-solutions-90ff4a07fdc2

medium.com

https://users.rust-lang.org/t/rust-vs-golang-deployment-statically-linked-binaries/68760

users.rust-lang.org

https://mt165.co.uk/blog/static-link-go/

mt165.co.uk

https://packagemain.tech/p/golang-statically-and-dynamically-linked-binaries

packagemain.tech

https://www.quorumcyber.com/threat-intelligence/threat-actors-use-go-language-edition-of-cobalt-strike-to-target-macos/

quorumcyber.com

RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector Read at the source ↗

unit42.paloaltonetworks.com

https://www.darkreading.com/endpoint-security/sophisticated-macos-infostealers-apple-built-in-detection

darkreading.com

https://www.huntress.com/blog/full-transparency-controlling-apples-tcc

huntress.com

https://developer.apple.com/documentation/networkextension

developer.apple.com

https://eclecticlight.co/2025/08/11/inside-xprotect-remediator-and-how-it-could-save-us-from-disaster/

eclecticlight.co

https://instatunnel.my/blog/rust-and-go-malware-cross-platform-threats-evading-traditional-defenses

instatunnel.my

https://www.youtube.com/watch?v=3Ha4b0_mDhk

youtube.com

https://objective-see.org/products/utilities.html

objective-see.org

Restoring Reflective Code Loading on macOS Read at the source ↗

objective-see.org

https://developer.apple.com/documentation/os/logging

developer.apple.com

https://nsantoine.dev/posts/constructing-our-own-console-app/

nsantoine.dev

Code Obfuscation Techniques on macOS: Beyond Packers Read at the source ↗

oliviagallucci.com