Stuck in Tutorial Hell? Learn Backend Dev the Right Way
AI, Data Science & Cloud Certificates from Google, IBM & Meta
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Explore the comparative advantages of macOS native telemetry versus EDR solutions in this conference talk from DFIR Prague 2025. Learn how Apple's Unified Logging System (AUL) captures deeper, host-level telemetry that traditional EDR tools often miss, particularly as threat actors increasingly target macOS systems in enterprise environments. Discover specific scenarios where unified logs provide critical forensic insights unavailable through EDR platforms, and understand how to effectively leverage AUL for incident response investigations. Master techniques for utilizing Private Data Logging and navigate the challenges of log retention limitations in macOS environments. Gain practical methodologies to enhance your macOS incident response capabilities by tapping into this powerful but underutilized forensic data source, presented by Fouad Animashaun, Security Engineer at Dropbox.
Syllabus
MacOS telemetry vs EDR telemetry - Which is better?
Taught by
SANS Digital Forensics and Incident Response