Tool
Aftermath
- First Reported
- Sep 5, 2023
- Latest Reported
- Oct 23, 2024
Reported Context (2)
- On the flip side, if I were a blue teamer and needed to perform incident response on an endpoint using Aftermath, my Terminal would need full disk access so my IR tool could collect all of the relevant and important How macOS Full Disk Access Works and How to Manage It
- on a Mac endpoint, the best thing you can do first is try to gather more information. Tools such as Aftermath, which is free, can gather more information from the endpoint than when analyzed, and put relevant Practical Steps to Secure macOS Devices
Malware (1)
People (3)
Vendors (3)
Products (16)
Tools (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.