Flash Hunt: Moonlit Mount and Silent Drift | Threat Hunting Labs
Rapid macOS drill focused on mounted-media execution, scripted orchestration, local collection, outbound transfer patterns, and startup persistence validation. This Investigation branch excludes malware-analysis prompts and keeps Search Console access.