Section 4: macOS Forensic Analysis

Section 4 will focus on the important points of macOS memory acquisition and analysis. In addition, ways to get the information needed to reconstruct user actions and detect malicious activity will be discussed.

This section of the book comprises the following chapters:

• Chapter 10, MacOS Memory Acquisition
• Chapter 11, Malware Detection and Analysis with macOS Memory Forensics