Analysis & Correlation of Mac Logs - SANS
Analysis & Correlation of Mac Logs - SANS
Analysis & Correlation of Mac Logs - SANS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Determine “Home” Network<br />
com.apple.airport.preferences.plist<br />
• “Item 0”<br />
• SecurityType != OPEN<br />
• “OPEN” generally seen at wifi hotspots<br />
• Example: My home network is “WPA2 Personal”<br />
system.log<br />
• More entries than most others when “airportd”<br />
searched for.<br />
oompa@csh.rit.edu | @iamevltwin