"incident_response": [ "pack_incident-response_mounts", "pack_incident-response_kernel_modules", "pack_incident-response_arp_cache", "pack_incident-response_listening_ports", "pack_incident-response_launchd", "pack_incident-response_startup_items", "pack_incident-response_crontab", "pack_incident-response_loginwindow1", "pack_incident-response_loginwindow2", "pack_incident-response_loginwindow3", "pack_incident-response_loginwindow4", "pack_incident-response_alf", "pack_incident-response_alf_exceptions", "pack_incident-response_alf_services", "pack_incident-response_alf_explicit_auths", "pack_incident-response_etc_hosts", "pack_incident-response_kextstat", "pack_incident-response_last", "pack_incident-response_installed_applications", "pack_incident-response_open_sockets", "pack_incident-response_open_files", "pack_incident-response_logged_in_users", "pack_incident-response_ip_forwarding", "pack_incident-response_process_env", "pack_incident-response_nfs_shares", "pack_incident-response_shell_history", "pack_incident-response_recent_items", "pack_incident-response_ramdisk", "pack_incident-response_suid_bin", "pack_incident-response_process_memory", "pack_incident-response_wireless_networks", "pack_incident-response_disk_encryption", "pack_incident-response_iptables", "pack_incident-response_app_schemes", "pack_incident-response_sandboxes" ]