Case 0005: Hunting DriveSurge: A macOS Credential-Stealing Intrusion | Threat Hunting Labs

Investigate a real-world macOS intrusion involving malware later attributed to DriveSurge. Follow the evidence across the compromised system, identify suspicious activity, and determine how the intrusion progressed.