What does APT Activity Look Like on MacOS? By Published by jaron.bradley on November 14, 2021November 14, 2021 Published: 2021-11-14 · Archived: 2026-04-05 18:35:17 UTC Related Posts Detecting SSH Activity via Process Monitoring Detecting SSH Activity via Process Monitoring During my time as a threat hunter, I’ve seen many intrusions start via SSH access using legitimate credentials. Now you might be thinking why on earth are users enabling Read more Incident Response With TrueTree Download TrueTree Incident Response With TrueTree TrueTree is an open-source tool designed by me for threat hunters, incident responders, or anyone in between. If you read part one of this blog post, you know that Read more https://themittenmac.com/what-does-apt-activity-look-like-on-macos/ Page 1 of 2 The TrueTree Concept Download TrueTree The TrueTree Concept The process tree is incredibly important when it comes to threat hunting. It doesn’t matter what platform you’re on. Every action that occurs on the operating system can be tied Read more Source: https://themittenmac.com/what-does-apt-activity-look-like-on-macos/ https://themittenmac.com/what-does-apt-activity-look-like-on-macos/ Page 2 of 2