Helpful Resources
Useful links to InfoSec & development resources with a bias towards Mac
InfoSec News and Blogs
- Risky Business - Risky Business
- Hacker News
- The DFIR Report
- The Hacker News
- Unsupervised Learning, by Daniel Miessler
- tl;dr sec
- Simon Willison’s Weblog
- Starting Up Security
- Rami McCarthy
- Krebs on Security
- Detection Engineering Weekly
- Detect FYI
- Reverse Engineering
- Security Cryptography Whatever
- Cody Thomas – Medium
macOS Security
- Advanced macOS Commands - saurabhs.org
- macOS Internals · GitHub
- Objective-See: Blog
- Apple Platform Security - Apple Support (CA)
- A launchd Tutorial
- Crash Security - Notes
- Blog – Random Security Research
- mac4n6.com
- Blog
- The Desolation of Blog
- Blog – The Mitten Mac
- Posts | IT Security blog
Misc Resources
- Hacking The Cloud
- GitHub - 0x4D31/awesome-threat-detection: ✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
- Rami’s Wiki
- CTHFM: Azure
- CTHFM: M365
- Detection Engineering Maturity Matrix
- auth.wiki
Tools
- seclook - Automatic security lookups from your clipboard
- Zed - The editor for what’s next - Fast code editor
- BenQ ZOWIE EC2-CW - Good mouse
- Obsidian - For remembering stuff
- Raycast - macOS productivity
- Fly - Hosting side projects and POCing ideas
- Sh_d_n - Fast lookups for specific resources (IPs and domains)
- GitHub - trufflesecurity/trufflehog - Find, verify, and analyze leaked credentials
- Tines - SOAR tool
- Sublime Security - Self-hosted email security
- bruno - Postman but not enshittified
- NetNewsWire- RSS reader
- Objective-See: LuLu - Firewall for macOS malware sandboxing
- GitHub - projectdiscovery/nuclei - Fast and customizable vulnerability scanner
- NextDNS - Set it and forget it DNS
- Tailscale - VPN / software-defined networks
- Warp - Fast terminal with some nice QOL features
- Proxmox - For self-hosting stuff
- Canarytokens - Lightweight sensors for detecting anomalous activity
- Vimium - Chrome Web Store - Keyboard shortcuts in Chrome
- HTTPie - API testing client, easier than using curl