CalvinBackup/THREAT-INTEL-Apple-System-Spoofing-C2
1
0
Fork 0
mirror of https://github.com/JGoyd/THREAT-INTEL-Apple-System-Spoofing-C2.git synced 2026-09-27 21:01:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update Threat Report .md

Browse Source
This commit is contained in:
Joseph Goydish II
2025-08-23 00:45:50 -04:00
committed by GitHub
parent 547a708a63
commit 271408437f
1 changed files with 0 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Threat Report .md
-11
View File
@@ -48,17 +48,6 @@ Artifacts such as crash logs, spindumps, memory artifacts, and spoofed process i
---
## Supporting Files
- `stacks-2025-08-20-180824.ips`: Stack traces implicating `osanalyticshelper`
- `MAAutoAsset_Filesystem_History_07.log`: Filesystem changes to protected paths
- `netstat.txt`: Transient outbound connections not aligned with user behavior
- `brctl-dump.txt`: Unusual low-level bridge traffic
- `spindump-nosymbols.txt`: Unsymbolicated memory-resident activity
- `taskinfo.txt`: Tasks mapped to spoofed `xpcservice` identities
---
## TTP Mapping
Behaviors observed are consistent with: