Lead AI Strategy with UCSB's Agentic AI Program — Microsoft Certified
Google Data Analytics, IBM AI & Meta Marketing — All in One Subscription
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the comparative advantages of macOS native telemetry versus EDR solutions in this conference talk from DFIR Prague 2025. Learn how Apple's Unified Logging System (AUL) captures deeper, host-level telemetry that traditional EDR tools often miss, particularly as threat actors increasingly target macOS systems in enterprise environments. Discover specific scenarios where unified logs provide critical forensic insights unavailable through EDR platforms, and understand how to effectively leverage AUL for incident response investigations. Master techniques for utilizing Private Data Logging and navigate the challenges of log retention limitations in macOS environments. Gain practical methodologies to enhance your macOS incident response capabilities by tapping into this powerful but underutilized forensic data source, presented by Fouad Animashaun, Security Engineer at Dropbox.
Syllabus
MacOS telemetry vs EDR telemetry - Which is better?
Taught by
SANS Digital Forensics and Incident Response