Join Sydney Marrone, Head of Threat Hunting and THOR Collective Co-Founder, for Hunting with Agents on Data That Isn’t Real: Agentic macOS Threat Hunting on Synthetic ESF Telemetry.

‍

Realistic macOS telemetry is hard to come by, and so are safe places to practice hunting with AI agents. In this 25-minute technical session, Sydney shows how agentic threat hunting works on synthetic Apple Endpoint Security Framework (ESF) telemetry. You’ll see how agents reason through macOS activity, where they shine, and where a human hunter still needs to step in.

‍

Attendees will leave with a practical view of agentic hunting on macOS and a repeatable way to build and test hunts without waiting for a real incident.

‍

Breakout Session Date and Time: Friday, Nov 20 at 9:45 - 10:10 a.m. HST