"Covers programming techniques that can be used to automatically detect malicious code running on a macOS system and the strategies used by actual malware specimens to evade detection. Reviews the operating system's internals and teaches how to develop real-time monitoring software"--