
My write up for a Memory Forensics/DFIR chall for Macos
https://mooofin.github.io/portfolio/blog/s4nct1m0ny.html
tuts for ISF from kernel DWARF. for vol as well . loginwindow plaintext credential extraction, Chainbreaker 3DES keychain decryption, and full RE of a Swift dropper using machine Hardware UUID as decryption key , ive tried to make it very less jargon and reader friendly