Prioritize Findings
Review the findings most likely to matter first, with context on why they deserve attention.
Incident Response
Preserve evidence before cleanup changes the system.
MSAA supports defensive macOS incident response with investigation priorities, notes, review state, snapshots, and local report export.
Document Notes
Keep local investigation notes and review state for follow-up and handoff.
Export Reports
Create JSON and HTML reports for case records, review, and remediation planning.