Apple enterprise management firm Jamf Holding Corp. has launched Symbol by Jamf Threat Labs, a premium threat hunting service. The service puts the firm’s research and detection engineers directly inside customer environments to hunt for attacks targeting Apple’s macOS.
Symbol is now generally available. The company said it fills a gap many security teams face as their Apple footprint gets bigger. Mac devices have become a bigger target for sophisticated attackers, but few organizations have staff with the specialized knowledge to monitor and investigate macOS-specific threats. The service is delivered by Jamf Threat Labs, the company’s in-house research and detection team.
Related: Global tensions fuel demand for risk intelligence
Three parts to the service
The first is dedicated macOS threat hunting, giving customers access to hunters versed in Apple’s security frameworks, threat actor techniques and macOS-specific attack vectors. Combined with Jamf telemetry, that produces investigation and reporting built for Apple environments rather than adapted from Windows-centric tooling.
Underpinning the service is Jamf’s Mac telemetry, which is built on Apple’s Endpoint Security application programming interface. That data lets analysts hunt for Apple-specific attack techniques and other suspicious behavior across a customer’s Mac fleet. Jamf said it prioritizes those investigations to cut the time an attacker goes undetected.
The third component leaves remediation with the organization.
Related: Nvidia pushes AI-driven biotech breakthroughs
When the team finds a danger, it hands over a report laying out what happened and what to do about it. Decisions on containment and policy stay with the organization’s own IT and security teams.
“Enterprise Mac adoption has grown at a rapid pace and threat actors have taken notice,” said Jaron Bradley, director of Threat Labs at Jamf.
Its research arm has steadily raised its profile through published analysis of macOS malware and attacker techniques. The service turns that work into a paid engagement.
Related: Amazon Web Services launches cost cutting tool
The service is sold as an add-on for Jamf for Mac and Jamf for Mac Hi-Ed users through a professional services engagement.
Pricing for the add-on was not disclosed.
