Advanced Mac OS X Physical Memory Analysis
- Type
- Slides
- Tags
- forensic, Mac OS X
- Authors
- Matthieu Suiche
- Event
- Black Hat DC 2010
- Indexed on
- Mar 26, 2013
- URL
- http://www.blackhat.com/presentations/bh-dc-10/Suiche_Matthieu/Blackhat-DC-2010-Advanced-Mac-OS-X-Physical-Memory-Analysis-slides.pdf
- File name
- Blackhat-DC-2010-Advanced-Mac-OS-X-Physical-Memory-Analysis-slides.pdf
- File size
- 933.6 KB
- MD5
- 85e750be45d1d8bd5897415f473812cb
- SHA1
- 0dc87b8241aa6b40ed7d3f092e6de2ac867444a8
In 2008 and 2009, companies and governments interests for Microsoft Windows physical memory growled significantly. Now it is time to talk about Mac OS X. This talk will describe basis of Mac OS X Kernel Internals (and not a XNU kernel creation timeline) and how to retrieve various information like machine information, mounted file systems, processes listing and extraction and threads, kernel extensions listing and extraction and Rootkit detection.
About us
Secdocs is a project aimed to index high-quality IT security and hacking documents. These are fetched from multiple data sources: events, conferences and generally from interwebs.
Statistics
Serving 8166 documents and 531.0 GB of hacking knowledge, indexed from 2419 authors from 163 security conferences.
Contribute
To support this site and keep it alive, you can click on the buttons below. Any help is really appreciated! This service is provided for free, but real money is needed to pay bills.
