San Francisco, CA

Brandon Dalton

Expert
@Brandon7CC

🕵️‍♂️ macOS Research @CrowdStrike

swiftly-detecting.notion.site

mac-monitor. "The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.

1.4k

mac-wheres-my-bootstrap. Detect common classes of XPC exploits

17

es-api-parser. Searchable reference for the macOS Endpoint Security API — parses SDK headers into a navigable local viewer

4

SimpleMacStats. A simple macOS system monitor.

2

Aura. Mythic iOS agent.

1
5
Apply