macOS Security for MacAdmins

Apple has a deep focus on security and privacy, and as Mac Admins, we are often asked to help secure the devices we manage. Now that the days of Kernel Panics due to rogue KEXTS are long gone, what are some of the tools that Apple has provided to allow detection and analysis of unwanted events on our managed devices? In this presentation we will explore Apple's Endpoint Security Framework, Unified Logging and other concepts that are essential to securing macOS. Rather than looking at them from the viewpoint of a developer building security tools or a security researcher hunting for threats, we will be exploring as Mac Admins, wanting to know how these tools work, the impact they have on our devices, and the rich source of information they give us access to.

About the presenter

Marcus Ransom has been managing Apple technology across enterprise and education for nearly two decades. He is a Senior Sales Engineer at Jamf as well as one of the hosts of the Mac Admins Podcast and the founder of Melbourne Apple Admins.

Session Recording