BYOB: Bring Your Own Blackbox - Containerized Defense Evasion on macOS
Objective-See Foundation via YouTube
Live Online Classes in Design, Coding & AI — Small Classes, Free Retakes
Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore how adversaries leverage containerization technologies to evade macOS security defenses in this conference talk from Objective-By-The-Sea v8.0. Discover the techniques attackers use with third-party container platforms like Docker and Apple's upcoming native Linux container support in macOS 26 Tahoe to bypass standard telemetry systems including Endpoint Security Framework (ESF) and endpoint detection and response (EDR) solutions. Learn about the historical evolution of macOS containerization while gaining insights into Apple's Hypervisor and Container Frameworks. Follow along with practical attack scenarios that demonstrate containers' stealth capabilities and their potential for defense evasion. Develop comprehensive detection strategies through a defense-in-depth playbook designed for integration with SIEM and EDR platforms. Master container-aware detection methodologies and acquire practical tools for identifying, investigating, and countering containerized attacks targeting macOS environments.
Syllabus
#OBTS v8.0 “BYOB: Bring your own Blackbox - Containerized Defense Evasion on macOS” - Colson Wilhoit
Taught by
Objective-See Foundation