Flash Hunt: MacSync Shell Collection and HTTP Upload | Threat Hunting Labs

Rapid macOS drill focused on Base64 pipe-to-shell execution, AppleScript shell orchestration, credential and developer artifact staging, HTTP archive upload, cleanup verification, and behavior-first detection design. This Investigation branch excludes malware-analysis prompts and keeps Search Console access.