Objective-See Foundation Courses

iPhone Backup Forensics - Introduction and Analysis Techniques

Discover the fundamentals of iPhone backup forensics, exploring data acquisition methods, artifact analysis, and automated processing techniques using SQL queries and Python scripts.

• YouTube
• 19 minutes
• Self-Paced
• Free Video

Apple's Not So Rapid Security Response System - Understanding Architecture and Limitations

Delve into Apple's Rapid Security Response system, exploring its architecture, limitations, and real-world deployment patterns in iOS 16 and macOS 13, with insights from security research.

• YouTube
• 16 minutes
• Self-Paced
• Free Video

Understanding Time Formats in iOS Sysdiagnose for Security Forensics

Discover how iOS sysdiagnose timestamps can reveal user movements, travel patterns, and geographical locations - essential knowledge for mobile forensics investigations and security analysis.

• YouTube
• 11 minutes
• Self-Paced
• Free Video

Swift Reversing in 2024 - It's Not So Bad

Dive into Swift code reversing techniques, focusing on disassembly analysis of strings, arrays, and closures, with practical examples from recent macOS malware implementations.

• YouTube
• 17 minutes
• Self-Paced
• Free Video

Patch Different on Operating Systems - Binary Diffing and Vulnerability Analysis

Master binary diffing techniques for *OS platforms, focusing on extracting and analyzing IPSW files, comparing binaries, and understanding security patches using open-source tools like ipsw and Ghidra.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Triangulating TrueType Fonts on macOS - Reconstructing CVE-2023-41990

Delve into the reconstruction of CVE-2023-41990, exploring TrueType font vulnerabilities in macOS and iOS through detailed analysis of Apple's font rendering system and exploit mechanisms.

• YouTube
• 42 minutes
• Self-Paced
• Free Video

Mach-O in Three Dimensions - Mapping macOS Malware Analysis

Explore innovative techniques for mapping macOS malware in 3D space, enabling better threat detection and family identification through advanced data science methodologies.

• YouTube
• 27 minutes
• Self-Paced
• Free Video

Make XNU GREAT Little Again - Apple's Darwin Kernel Security Evolution

Explore Apple's Darwin Kernel evolution and XNU security enhancements, from KTRR to exclaves, revealing groundbreaking kernel protections exclusive to Apple silicon platforms.

• YouTube
• 55 minutes
• Self-Paced
• Free Video

BYOB: Bring Your Own Blackbox - Containerized Defense Evasion on macOS

Explore how adversaries use Docker and Apple's native containers to evade macOS security defenses, plus learn detection strategies for containerized attacks.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Catch Me If You Scan - MITRE-Enhanced ML Magic to Solve Mac Malware's Identity Crisis at Scale

Discover how ML and MITRE ATT&CK methodology solve macOS malware's identity crisis, transforming generic detections into precise threat classification and family identification.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

BlueNoroff's Clues - Investigating a DPRK Intrusion

Uncover BlueNoroff's sophisticated DPRK attack chain, from process injection to Objective-C keyloggers, analyzing advanced tradecraft used in targeted macOS intrusions.

• YouTube
• 23 minutes
• Self-Paced
• Free Video

XUnprotect - Reverse Engineering macOS XProtect Remediator

Discover how to reverse engineer macOS XProtect Remediator, uncovering advanced detection mechanisms including OCR-based malware identification and Apple's exclusive threat intelligence.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Queen B - Apple Compressor 0-click RCE

Discover how to exploit Apple Compressor's 0-click RCE vulnerability through reverse engineering, network protocol analysis, and sandbox bypass techniques in this security research presentation.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Placeboed Apples - A New Way to Hunt Spyware on iOS

Discover innovative malware simulation techniques to detect iOS spyware by mimicking known threats, identifying forensic indicators, and transforming chaotic data into focused investigations.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Hook, Line and Koi Stealer - New macOS Malware in DPRK Fake Job Interviews

Uncover DPRK-linked macOS malware targeting crypto developers through fake job interviews, analyzing Koi Stealer's sophisticated AppleScript tactics and C2 communication methods.

• YouTube
• 31 minutes
• Self-Paced
• Free Video