Catch Me If You Scan - MITRE-Enhanced ML Magic to Solve Mac Malware's Identity Crisis at Scale

Learn how machine learning and MITRE ATT&CK methodology can solve the persistent problem of generic macOS malware classification in this 24-minute conference talk from Objective-See Foundation's OBTS v8.0. Discover how researchers developed an innovative tool to transform vague "Application.MAC.Generic" labels into precise threat identification, addressing the challenge where approximately 70% of macOS malware loses its identity in traditional detection systems. Explore the integration of ML clustering technologies with proprietary SWARM methodology to automatically group malicious samples and reveal hidden patterns that standard sandbox analyses often miss. Understand how this approach enables accurate prediction of threat types - distinguishing between trojans, backdoors, stealers, and false positives - while addressing the specific evasion techniques used by modern macOS malware like newer AMOS stealer versions. Gain insights into practical implementation strategies for SOC specialists who currently rely on manual analysis and behavioral pattern recognition, and learn about the collaborative opportunities available for organizations looking to enhance their macOS security posture through effective ML-driven threat detection solutions.