Astra Kernel 

✨ Bypassing EDR : In-Memory Execution in macOS - the Old and the New

https://rtx.meta.security/post-exploitation/2022/12/19/In-Memory-Execution-in-macOS.html

Credit: @r34p3r

#redteaming #dfir #threatintel #threathunting #pentesting #infosec #edr #edrbypass

In-Memory Execution in macOS: the Old and the New

Technical writeups by Meta’s Security folks, including Red Team.

Meta Red Team X
Dec 20, 2022 at 2:44amWeb