corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0bdd0-f47a-7250-9e4f-f871e44c7e24

macOS Internals for Detection Engineers

oliviagallucci.com · published 13 April 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at oliviagallucci.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
39
Words captured
2,923

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://gist.github.com/kconner/cff08fe3e0bb857ea33b47d965b3e19f
gist.github.com
https://reverse.put.as/wp-content/uploads/2011/09/Apple-Sandbox-Guide-v1.0.pdf
reverse.put.as
https://mroi.github.io/apple-internals/
mroi.github.io
Miles for Mac Security: Supporting FOSS and Aspiring Hackers Read at the source ↗
oliviagallucci.com
https://taomm.org/
taomm.org
https://www.betterworldbooks.com/product/detail/blue-fox-arm-assembly-internals-and-reverse-engineering-9781119745303
betterworldbooks.com
https://azeria-labs.com/writing-arm-assembly-part-1/
azeria-labs.com
https://www.arm.com/architecture/learn-the-architecture
arm.com
https://developer.arm.com/-/media/Arm%20Developer%20Community/PDF/Learn%20the%20Architecture/LearnTheArchitecture-MemoryManagement-101811_0100_00_en.pdf?revision=01a01804-ca64-4e19-a55e-2af56afea5a5
developer.arm.com
https://developer.arm.com/documentation/ddi0406/c/
developer.arm.com
https://openlibrary.org/books/OL18160700M/ARM_architecture_reference_manual
openlibrary.org
https://oliviagallucci.com/?post_type=post&p=74001
oliviagallucci.com
https://en.wikipedia.org/wiki/Queueing_theory
en.wikipedia.org
How to manipulate the execution flow of TOCTOU attacks Read at the source ↗
oliviagallucci.com
https://eclecticlight.co/
eclecticlight.co
https://eclecticlight.co/2018/03/20/macos-unified-log-2-content-and-extraction/
eclecticlight.co
https://notes.crashsecurity.io/notes
notes.crashsecurity.io
https://www.detectionengineering.net/p/det-eng-weekly-108-can-any1-in-the
detectionengineering.net
Monitoring Process Creation via the Kernel (Part I) Read at the source ↗
objective-see.org
https://theevilbit.github.io/posts/
theevilbit.github.io
https://gergelykalman.com/
gergelykalman.com
https://alden.io/
alden.io
https://x.com/naehrdine
x.com
https://wojciechregula.blog/post/
wojciechregula.blog
https://x.com/moonlock_com
x.com
https://x.com/i41nbeer
x.com
https://gynvael.coldwind.pl/?blog=1
gynvael.coldwind.pl
Mach-O Anatomy on Michael Tsai’s blog Read at the source ↗
mjtsai.com
clownpertino - A simple macOS debugger detection trick Read at the source ↗
reverse.put.as
https://objectivebythesea.com/
objectivebythesea.com
https://objective-see.org/we.html
objective-see.org
https://newosxbook.com/ent.php
newosxbook.com
https://www.newosxbook.com/index.php
newosxbook.com
https://theapplewiki.com/wiki/Main_Page
theapplewiki.com
https://ipsw.me/
ipsw.me
https://oliviagallucci.com/contact/
oliviagallucci.com
How OS affects binary exploitation Read at the source ↗
oliviagallucci.com
IDS Security Using Decision Trees and Neural Networks​​ Read at the source ↗
oliviagallucci.com
https://developer.arm.com/-/media/Arm%20Developer%20Community/PDF/Learn%20the%20Architecture/LearnTheArchitecture-MemoryManagement-101811_0100_00_en.pdf
developer.arm.com