Objective-See Foundation Courses

Patch Different on Operating Systems - Binary Diffing and Vulnerability Analysis

Master binary diffing techniques for *OS platforms, focusing on extracting and analyzing IPSW files, comparing binaries, and understanding security patches using open-source tools like ipsw and Ghidra.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Triangulating TrueType Fonts on macOS - Reconstructing CVE-2023-41990

Delve into the reconstruction of CVE-2023-41990, exploring TrueType font vulnerabilities in macOS and iOS through detailed analysis of Apple's font rendering system and exploit mechanisms.

• YouTube
• 42 minutes
• On-Demand
• Free Video

Mach-O in Three Dimensions - Mapping macOS Malware Analysis

Explore innovative techniques for mapping macOS malware in 3D space, enabling better threat detection and family identification through advanced data science methodologies.

• YouTube
• 27 minutes
• On-Demand
• Free Video

Keynote Tutorial - From Keynope to Keydope - Part 1

Master keynote presentation skills and transform from "keynope to keydope" with expert guidance on public speaking techniques and presentation delivery methods.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Make XNU GREAT Little Again - Apple's Darwin Kernel Security Evolution

Explore Apple's Darwin Kernel evolution and XNU security enhancements, from KTRR to exclaves, revealing groundbreaking kernel protections exclusive to Apple silicon platforms.

• YouTube
• 55 minutes
• On-Demand
• Free Video

BYOB: Bring Your Own Blackbox - Containerized Defense Evasion on macOS

Explore how adversaries use Docker and Apple's native containers to evade macOS security defenses, plus learn detection strategies for containerized attacks.

• YouTube
• 35 minutes
• On-Demand
• Free Video

Catch Me If You Scan - MITRE-Enhanced ML Magic to Solve Mac Malware's Identity Crisis at Scale

Discover how ML and MITRE ATT&CK methodology solve macOS malware's identity crisis, transforming generic detections into precise threat classification and family identification.

• YouTube
• 24 minutes
• On-Demand
• Free Video

BlueNoroff's Clues - Investigating a DPRK Intrusion

Uncover BlueNoroff's sophisticated DPRK attack chain, from process injection to Objective-C keyloggers, analyzing advanced tradecraft used in targeted macOS intrusions.

• YouTube
• 23 minutes
• On-Demand
• Free Video

XUnprotect - Reverse Engineering macOS XProtect Remediator

Discover how to reverse engineer macOS XProtect Remediator, uncovering advanced detection mechanisms including OCR-based malware identification and Apple's exclusive threat intelligence.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Queen B - Apple Compressor 0-click RCE

Discover how to exploit Apple Compressor's 0-click RCE vulnerability through reverse engineering, network protocol analysis, and sandbox bypass techniques in this security research presentation.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Placeboed Apples - A New Way to Hunt Spyware on iOS

Discover innovative malware simulation techniques to detect iOS spyware by mimicking known threats, identifying forensic indicators, and transforming chaotic data into focused investigations.

• YouTube
• 41 minutes
• On-Demand
• Free Video

Hook, Line and Koi Stealer - New macOS Malware in DPRK Fake Job Interviews

Uncover DPRK-linked macOS malware targeting crypto developers through fake job interviews, analyzing Koi Stealer's sophisticated AppleScript tactics and C2 communication methods.

• YouTube
• 31 minutes
• On-Demand
• Free Video

Something from Nothing - Exploiting Memory Zeroing in XNU

Explore XNU virtual memory vulnerabilities and learn how to exploit memory zeroing issues to achieve root access on macOS through detailed technical analysis.

• YouTube
• 37 minutes
• On-Demand
• Free Video

From Bits to Behavior - Detecting macOS Command and Control Through Statistical Analysis

Uncover statistical methods to detect macOS command & control communication by analyzing log patterns, timing irregularities, and implementing detection using OSQuery and Filebeat.

• YouTube
• 24 minutes
• On-Demand
• Free Video

What's at the Bottom of the Sea, One Baseband? - Diving into the C1

Dive into Apple's first in-house C1 baseband architecture, comparing it to Qualcomm/Intel designs while exploring security features and automated carrier profile monitoring tools.

• YouTube
• 24 minutes
• On-Demand
• Free Video