memdumper macOS EDR Process Attribution Evasion

memdumper is a macOS process memory inspection utility that injects a dynamic library into an existing signed binary possessing Apple debugger and DYLD-related entitlements. The injected library uses the entitled process to obtain a target task port, search or dump readable process memory, attach...