Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore the comparative advantages of macOS native telemetry versus EDR solutions in this conference talk from DFIR Prague 2025. Learn how Apple's Unified Logging System (AUL) captures deeper, host-level telemetry that traditional EDR tools often miss, particularly as threat actors increasingly target macOS systems in enterprise environments. Discover specific scenarios where unified logs provide critical forensic insights unavailable through EDR platforms, and understand how to effectively leverage AUL for incident response investigations. Master techniques for utilizing Private Data Logging and navigate the challenges of log retention limitations in macOS environments. Gain practical methodologies to enhance your macOS incident response capabilities by tapping into this powerful but underutilized forensic data source, presented by Fouad Animashaun, Security Engineer at Dropbox.
