Threat Hunting: the macOS editionMuch of the research into host-based indicators for threat hunting has focused on Windows. This presentation focuses on host-based indicators I found on macOS after running malware through a lab environment. While the hunting queries I present will be specific to one SIEM, the ideas should be applicable to any SIEM that has process monitoring data.