Get 20% off all career paths from fullstack to AI
Finance Certifications Goldman Sachs and Amazon Teams Trust
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
Explore the comparative advantages of macOS native telemetry versus EDR solutions in this conference talk from DFIR Prague 2025. Learn how Apple's Unified Logging System (AUL) captures deeper, host-level telemetry that traditional EDR tools often miss, particularly as threat actors increasingly target macOS systems in enterprise environments. Discover specific scenarios where unified logs provide critical forensic insights unavailable through EDR platforms, and understand how to effectively leverage AUL for incident response investigations. Master techniques for utilizing Private Data Logging and navigate the challenges of log retention limitations in macOS environments. Gain practical methodologies to enhance your macOS incident response capabilities by tapping into this powerful but underutilized forensic data source, presented by Fouad Animashaun, Security Engineer at Dropbox.
Syllabus
MacOS telemetry vs EDR telemetry - Which is better?
Taught by
SANS Digital Forensics and Incident Response