AutoFocus™ now provides the following artifact types that you
can use to perform an AutoFocus search. The AutoFocus API also supports
these new artifacts.
Search with this
Artifact Type to Find...
Mac Embedded File
Internal files in a Mac app installer or
a Mac app bundle. Details for an embedded file can include the SHA256
and name of the installer or bundle, the file’s SHA1 hash, filename, file
format, file location, SHA256 hash, the signature associated with
the file and the name of the signer, the SHA1 hash for the signature,
signature status, and the file size in bytes. You can find this
artifact in the file analysis details of
a sample, under the WildFire® Static Analysis section.