ConradSun / NuwaStone
A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).
☆44Updated 2 months ago
Alternatives and similar repositories for NuwaStone:
Users that are interested in NuwaStone are comparing it to the libraries listed below
- X-Monitor is an open-source, extensible event monitoring tool for macOS that provides security professionals with the ability to perform …☆18Updated 10 months ago
- MacOS X process monitor using EndpointSecurity extension.☆35Updated 3 years ago
- Sample code for macOS Extensions Part 3☆24Updated 5 years ago
- Yet another xpc sniffer☆124Updated last month
- Guessed headers of non-public Apple SDK☆25Updated 2 months ago
- Updated sample code for OS X and iOS Kernel Programming book☆37Updated 6 years ago
- A simple demonstration of the macOS Network Extension☆15Updated 3 years ago
- A runtime ObjC class-dump☆70Updated 2 months ago
- Secure example of an XPC helper written in Swift☆105Updated 4 years ago
- Learn MacOS kernel extensions☆46Updated 7 years ago
- Small demo programs showing work with various macOS frameworks and facilities that can be used to monitor (and in some cases to control) …☆14Updated 4 years ago
- Packed tool for extracting frameworks and libraries from iOS dyld shared cache.☆29Updated 2 years ago
- This is a complete Xcode project of the Endpoint Security Demo gist: https://gist.github.com/Omar-Ikram/8e6721d8e83a3da69b31d4c2612a68ba☆19Updated last month
- slightly modified version of jonathan levins lsdtrip bin available at http://newosxbook.com/tools/lsdtrip.html☆18Updated 11 months ago
- Bidirectional XPC between two (or more) processes without a MachService daemon☆54Updated 2 years ago
- ☆11Updated 9 months ago
- Hopper Disassembler v5 scripts, focus on iOS/macOS☆25Updated 2 years ago
- Read property lists embedded inside of Mach-O executables (commonly Command Line Tools)☆15Updated 2 years ago
- Modifications to Apple's dyld project to fix Objective-C information when extracting dyld_shared_cache from macOS Big Sur to help Hopper …☆146Updated 4 years ago
- symbol dumps of iOS shared caches☆34Updated 2 years ago
- Mach-O file parser.☆51Updated 5 months ago
- C++ library for com.apple.network.statistics kernel events on MacOS/OS X/Darwin☆21Updated 4 years ago
- Tool for reverse-engineering Apple's sandbox☆56Updated 7 years ago
- Objective-C wrapper around SecCertificateRef☆36Updated 10 months ago
- arm64 and arm64e dylib injector☆31Updated last year
- Generates a research variant of the iOS SDK for use with SRD development☆21Updated last week
- Apple's EvenBetterAuthorization Sample Project☆43Updated 5 years ago
- A modern Objective-C class dump based on LIEF and LLVM.☆157Updated 7 months ago
- An NSXPCConnection wrapper that does signature validation☆26Updated 10 months ago
- A macOS command-line tool to dump the contents of dyld shared cache files.☆36Updated last year