Inside macOS: From Process Investigation to Behavior Modification

In this talk, we’ll explore how to investigate macOS applications using the native LLDB debugger and related tools. Through hands-on examples, we’ll look at how to analyze the internal mechanisms of system apps, uncover the less obvious parts of their behavior, and even modify that behavior by injecting your own code to enhance their functionality and improve the developer's daily toolkit.

The talk is suitable for engineers of any level who are curious about how familiar things work “under the hood”. No prior experience in reverse engineering or low-level development is required. By the end of the session, you’ll have:

• a deeper understanding of the platform and how macOS system applications work
• new approaches to diagnosing tricky bugs and unusual program behavior
• a practical sense of how to use LLDB not only for debugging, but also as an advanced research tool
• a solid starting point for exploring reverse engineering on your own and the confidence to dig deeper.