Authentication

Introduction
Disable automatic login
Require a password when resuming
Make that more secure passwords
Use a password manager
- Managers
- It does not protect from keyloggers
Use multi-factor authentication (MFA)
Protect SSH access with MFA

Services and applications

Introduction
Restrict which apps can run
System integration protection (SIP)
Secure browsers that protect your privacy
Use a secure messaging service
Use secure email services
- Articles
Use SSH tunnels
Use a VPN service
- No logs policy
- Logs timestamps and bandwidth
Use a firewall as a VPN fail-safe mechanism
- Kill switch using pf
Use alternative DNS servers
- Alternative DNS servers
- Use wireshark to check for leaks
Use a Tor proxy
Change MAC address
Renew IP lease
Edit hosts file

Data

Introduction
Set up the time machine and backups
Enable full disk encryption using FileVault
- Enable FileVault
- Create a Vault
Password protect files and folders

Privacy

Introduction
Disable location services and other privacy settings
Remove metadata from files
- Techniques for metadata removal
Edit exif metadata in images
- Native
  - ExifEdit
Remove metadata with hex editors
Clean machine with BleachBit

Malware

Introduction
Mac myths
- There are no viruses for Mac
- Apple quickly fixes vulnerabilities
Scan and clean machine
Catch and remove daemons and launch agents
Analysing trojans
- Related

Operations security

Introduction
- Fail
Use email securely
Detecting fake emails and phishing
- Fake emails
- Phishing
Browse more safely
Check integrity of downloads
- Verifying downloaded software
‘;–have i been pwned?

Guards! Guards!

Introduction
- Choosing a firewall for a Mac
- Choosing a HIDS for a Mac
Alphabet soup
- Firewall
- IDS
- IPS
macOS intrusion detection systems
- Host intrusion detection systems
- Network intrusion detection systems
OSSEC

Hardening macOS

Hardening macOS
Blue Team
Improbability Blog
About the UU
Register

macOS intrusion detection systems

Host intrusion detection systems

Aide
Samhain
OSSEC
Sagan
Fail2Ban

Network intrusion detection systems

Zeek
Suricata
Sagan

Previous Next

Unseen University, 2023, with a forest garden fostered by /ut7.