Jai Musunuri

Obscure the secure. Thoughts and opinions are my own.

[Tim Parisi @realparisi]

More ransomware actors like FERAL SPIDER are hitting the ESXi jackpot and encrypting entire VMs. Read more of what we've seen and how to mitigate and protect ESXi in our Hypervisor Jackpotting Part 2 blog: https://t.co/UdKOOZn8fa

[Jai Musunuri @JaiMusunuri]

Excited to have this AutoMacTC update out to the community! A big thanks to @0xAnthony and @notx11 for their contributions!

[CrowdStrike @CrowdStrike]

Read “CrowdStrike Services Releases AutoMacTC v1.2.0” in the @CrowdStrike blog: https://t.co/7Wf8zisXmw via @JaiMusunuri @0xAnthony @notx11

[CrowdStrike @CrowdStrike]

The Apple Unified Log (AUL) is both a blessing and a curse for responders. In this blog, we explain why Apple implemented it, how it works, what type of information it records and how to use it. https://t.co/aNy4YpJYWg via @JaiMusunuri #cybersecurity

[Jai Musunuri @JaiMusunuri]

Glad to have had the opportunity to present about the Apple Unified Log at #OBTS!

[Objective-See Foundation @objective_see]

🔍 First talk of Day 2 @ #OBTS digs into Unified Logging (AUL). @JaiMusunuri & Erik Martin do a great 👍 job showing us how to filter predicates to hunt quickly through AUL and it’s increased granularity compared to older log formats 🤩!

[Miriam Wiesner @MiriamXyra]

Amazing #BHEU Arsenal session by @kshitijk_ and @JaiMusunuri about hunting worms and all the bad things on MacOS presenting their tool AutoMacTC

[Black Hat @BlackHatEvents]

@JaiMusunuri & @kshitijk demo tool AutoMacTC: an open-source Python framework that can be quickly deployed to gather forensic data on macOS devices at this #BHEU Arsenal presentation. https://t.co/SVtxkwiDa1

[Tim Parisi @realparisi]

Full house for the #MacOS Lessons from the Front Lines. #FalConUNITE19 #AutoMacTC by @JaiMusunuri

[Jai Musunuri @JaiMusunuri]

Excited to be presenting at Black Hat Europe Arsenal in December!

[Black Hat @BlackHatEvents]

Join @JaiMusunuri & @kshitijk as they discuss tool “AutoMacTC” an open-source Python framework that can be quickly deployed to gather forensic data on macOS devices at this #BHEU Arsenal presentation. https://t.co/XmDvzQbZN9

[Jai Musunuri @JaiMusunuri]

A new #AutoMacTC module is now available to parse #macOS Terminal saved state files: https://t.co/uPLY8VIdJx

You can learn more about reconstructing Terminal saved state files here: https://t.co/y8B7ovisu5

#DFIR

[CrowdStrike @CrowdStrike]

New blog from @JaiMusunuri & Phil Pineda show how to aid #digitalforensics investigations by reconstructing #macOS Terminal sessions to recover an adversary’s commands from an interactive session, even if an adversary is trying to cover their tracks. https://t.co/FodLykxDFF #DFIR

[Black Hat @BlackHatEvents]

@TheKshitijKumar & @jaimusunuri discuss AutoMacTC: an open-source Python framework that can be quickly deployed to gather forensic data on macOS devices. Don’t miss out on this #BHUSA Arsenel demo! https://t.co/xCh79ET6m1

[Black Hat @BlackHatEvents]

See @TheKshitijKumar & @jaimusunuri showcase AutoMacTC: an open-source Python framework that can be quickly deployed to gather forensic data on macOS devices, from the artifacts that matter most to you and your investigation at #BHUSA Arsenal https://t.co/nzgDNjc8SA

[Jai Musunuri @JaiMusunuri]

Thanks for the shoutout @chadtilbury!

[Chad Tilbury @chadtilbury]

Great to see a public release of this tool. A rare open source tool enabling Mac incident response. Nice work @JaiMusunuri, @TheKshitijKumar, @TheEricJohn, et al.