<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>APFS :: 标签 :: x7peeps</title><link>https://x7peeps.com/tags/APFS/index.html</link><description/><generator>Hugo</generator><language>zh-CN</language><lastBuildDate>Thu, 02 Jul 2026 15:00:00 +0800</lastBuildDate><atom:link href="https://x7peeps.com/tags/APFS/index.xml" rel="self" type="application/rss+xml"/><item><title>macOS系统入侵取证深度分析</title><link>https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E7%B3%BB%E7%BB%9F%E4%B8%8E%E7%8E%AF%E5%A2%83%E5%8F%96%E8%AF%81/macOS%E7%B3%BB%E7%BB%9F%E5%85%A5%E4%BE%B5%E5%8F%96%E8%AF%81%E6%B7%B1%E5%BA%A6%E5%88%86%E6%9E%90/index.html</link><pubDate>Thu, 02 Jul 2026 15:00:00 +0800</pubDate><guid>https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/%E7%B3%BB%E7%BB%9F%E4%B8%8E%E7%8E%AF%E5%A2%83%E5%8F%96%E8%AF%81/macOS%E7%B3%BB%E7%BB%9F%E5%85%A5%E4%BE%B5%E5%8F%96%E8%AF%81%E6%B7%B1%E5%BA%A6%E5%88%86%E6%9E%90/index.html</guid><description>围绕 macOS 系统入侵取证的全面深度分析，覆盖 macOS 日志体系（unified log/ASL）、Gatekeeper 绕过检测、LaunchAgent/LaunchDaemon 持久化、SIP 状态分析、XProtect/AMC 绕过取证、Keychain 取证、扩展属性与资源分支、APFS 文件系统取证、MDM 配置分析、macOS 恶意软件家族特征、自动化检测与狩猎脚本等。</description></item></channel></rss>