AFTERMATH

Summary from the TLDR InfoSec newsletter

Aftermath is a free macOS Incident Response framework from JAMF. It allows defenders to collect and analyze data from a compromised host. Aftermath can be run as a standalone tool or deployed via MDM and then a series of collection modules can be run to collect data for analysis.