macOS Analyzers

Audit Event AnalyzerDynamo Analyzer

• YARA Scanner (gys)

  Scans your asset with your YARA repositories(refer to blog post here).

• Browser History Analyzer (bha)

  Identifies URLs of interest from the browser histories.

• CronJob Analyzer (cra)

  Identifies suspicious entries in CronJob tasks.

• Downloads Analyzer (dla)

  Identifies suspicious entries in downloads.

• Shell History Analyzer (sha)

  Identifies suspicious entries in Shell histories.