rdf-syntax-grammar
mods:
  schema location: http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
  title info:
    title: OS X incident response
    sub title: scripting and analysis
  name:
    name part: Bradley, Jaron
    role:
      role term: creator
    role:
      role term: author.
  name:
    name part: ScienceDirect (Online service)
  type of resource: text
  genre: Electronic books.
  origin info:
    place:
      place term: mau
    date issued: 2016
    issuance: monographic
  language:
    language term: eng
  physical description:
    form: remote
    extent: 1 online resource.
  abstract: Written for analysts who are looking to expand their understanding of a lesser-known operating system, this book focuses exclusively on OS X attacks, incident response, and forensics, and covers a wide variety of topics, including both the collection and analysis of the forensic pieces found on the OS. --
  table of contents: Cover; Title Page; Copyright Page; Contents; Acknowledgments ; Chapter 1 -- Introduction; Is there really a threat to OS X?; What is OS X; The XNU Kernel; Digging Deeper; Requirements; Forensically sound versus incident response; Incident Response Process; The Kill Chain; Applying the Killchain; Analysis environment; Malware Scenario; Chapter 2 -- Incident Response Basics; Introduction; Picking a language; Python; Ruby; Bash; Root versus nonroot; Yara; Basic Commands for Every Day Analysis; grep; egrep; cut; awk; sed; sort; uniq; Starting an IR Script; Collection; Analysis; Analysis Scripts.
  table of contents: Yarafly.shYara Results Sorted and Counted; Conclusion; Chapter 3 -- Bash Commands; Introduction; Basic Bash commands; System Info; date; hostname; uptime; sw_vers; uname (-a); spctl ( -- status); bash -version; Who Info; whoami; who; w; finger (-m); last (); screen (-ls) (-x); User information; id; groups; printenv; dscl . -ls /Users; Process Information; ps (aux); Network Information; ifconfig; netstat (-ru) (-an); lsof (-p ) (-i); smbutil (statshares -a); arp (-a); security dump-trust-settings (-s) (-d); networksetup; System startup; launchctl list; crontab -l; atq; kextstat.
  table of contents: Additional Commandsmdfind (-name) (-onlyin); sysctl (-a); history; security list-keychains; nvram; du -h; diskutil list; Miscellaneous; codesign (-d) (-vv); file; md5; tcpdump; printenv; nettop (-m); DTrace; Bash Environment Variables; Scripting the Collection; Analysis; Conclusion; Chapter 4 -- File System; Introduction; Brief history; HFS+ overview; Volume Header; Allocation File; Catalog File; Attributes B-Tree; Inodes, Timestamps, Permissions, and Ownership; Inodes; Timestamps; Timestamps for Files; Timestamps for Folders; Permissions; Special File Permissions; Directory Permissions.
  table of contents: Sticky BitExtended Attributes; Access Control Lists; Resource Forks; File Types and Traits; OS X Specific File Extensions; .dmg; .kext; .plist; .app; .dylib; .pkg; Mach-O binary; Popular Scripting Languages Found on OS X; File Hierarchy Layout; /Applications; /Library; /System; /Users; /Volumes; /.vol; /bin; /usr; /cores; /sbin; /dev; /etc; /tmp; /private; /var; Miscellaneous Files; Hidden Files and Directories; .DS_Store; .Spotlight-V100; .metadata_never_index; .noindex; File Artifacts; Logs and Rotation; Key File Artifacts.
  note: Jaron Bradley.
  note: Includes index.
  note: Includes bibliographical references.
  subject:
    title info:
      title: Mac OS
  subject:
    title info:
      title: Mac OS
  subject:
    topic: Computer security
  subject:
    topic: Intrusion detection systems (Computer security)
  subject:
    topic: Computer crimes
    topic: Investigation
  subject:
    topic: Sécurité informatique
  subject:
    topic: Systèmes de détection d'intrusion (Sécurité informatique)
  subject:
    topic: Criminalité informatique
    topic: Enquêtes
  subject:
    topic: COMPUTERS
    topic: Security
    topic: Online Safety & Privacy
  subject:
    topic: COMPUTERS
    topic: Security
    topic: Networking
  subject:
    topic: COMPUTERS
    topic: Security
    topic: General
  subject:
    topic: Computer crimes
    topic: Investigation
  subject:
    topic: Computer security
  subject:
    topic: Intrusion detection systems (Computer security)
  classification: QA76.9.A25
  classification: 005.8
  related item:
    identifier: (OCoLC)944209939
  identifier: 9780128045039
  identifier: 0128045035
  identifier: 012804456X
  identifier: 9780128044568
  identifier: 9780128045039 Ingram Content Group
  identifier: http://proxy.library.tamu.edu/login
  record info:
    record content source: YDXCP
    record creation date: 160512
    record change date: 20260327150427.9
    record identifier: in00005760416
    language of cataloging:
      language term: eng