Threat Hunting for macOS
Below is a list of Tactics, Techniques and Procedures (TTP's) targeting the macOS operating system. Within each TTP, you will find:- information about each TTP
- a way to reproduce the TTP using Prelude Operator
- detection queries using Endpoint Detection and Response (EDR)
MITRE ATT&CK® and ATT&CK® are registered trademarks of The MITRE Corporation. You can see the current ATT&CK® mapping of this project on the ATT&CK® Navigator (be sure to click the "expand annotated sub-techniques under the layer controls on the top right!).