Alternatives and similar repositories for endpoint-sec

Users that are interested in endpoint-sec are comparing it to the libraries listed below

• n4r1b / ferrisetw
  Basically a KrabsETW rip-off written in Rust
  ☆82Updated 3 months ago
• Hugal31 / yara-rust
  Rust bindings for VirusTotal/Yara
  ☆80Updated 2 months ago
• SentineLabs / XProtect-Malware-Families
  Mapping XProtect's obfuscated malware family names to common industry names.
  ☆92Updated 2 months ago
• securing / SimpleXPCApp
  Secure example of an XPC helper written in Swift
  ☆108Updated 5 years ago
• Impalabs / applevisor
  Rust bindings fo the Apple Silicon Hypervisor.framework
  ☆47Updated 3 weeks ago
• themittenmac / TrueTree
  A command line tool for pstree-like output on macOS with additional pid capturing capabilities
  ☆275Updated last year
• theevilbit / Shield
  An app to protect against process injection and suspicious file links on macOS
  ☆230Updated 4 years ago
• ConradSun / NuwaStone
  A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).
  ☆50Updated 6 months ago
• PhorionTech / Kronos
  Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…
  ☆79Updated 2 years ago
• mandiant / macos-UnifiedLogs
  A cross platform parser for Apple UnifiedLogs!
  ☆318Updated this week
• l0psec / arm64_macOS_Syscalls
  ☆56Updated last year
• msuiche / elegant-bouncer
  ELEGANTBOUNCER is a detection tool for file-based mobile exploits.
  ☆171Updated 4 months ago
• kornelski / rust-security-framework
  Bindings to the macOS Security.framework
  ☆286Updated 3 months ago
• puffyCid / artemis
  A cross platform forensic parser written in Rust!
  ☆101Updated this week
• willyu-elastic / SimpleEndpoint
  Sample code for macOS Extensions Part 3
  ☆24Updated 5 years ago
• flier / rust-macho
  Mach-O File Format Parser for Rust
  ☆94Updated last year
• obelisk / endpointsecurity
  Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.
  ☆21Updated 2 years ago
• Omar-Ikram / EndpointSecurityDemo
  This is a complete Xcode project of the Endpoint Security Demo gist: https://gist.github.com/Omar-Ikram/8e6721d8e83a3da69b31d4c2612a68ba
  ☆20Updated last year
• gyunaev / macprocmon
  MacOS X process monitor using EndpointSecurity extension.
  ☆37Updated 4 months ago
• nmggithub / Kass
  Kass: A security research tool.
  ☆97Updated 2 months ago
• 0xbf00 / macos-sandbox-coverage
  Tools to measure an app's App Sandbox usage
  ☆26Updated 5 years ago
• objective-see / FileMonitor
  File Monitor Library (based on Apple's new Endpoint Security Framework)
  ☆369Updated 3 years ago
• microsoft / rust_win_etw
  Allows Rust code to log events to ETW
  ☆112Updated last month
• 0xmachos / Apple-Platform-Security-Guides
  Every Apple Platform Security Guide
  ☆164Updated last year
• 0xbf00 / simbple
  macOS Sandbox Profile Language (SBPL) Interpreter
  ☆57Updated 5 years ago
• libyal / dtformats
  Collection of data formats
  ☆189Updated last month
• pstirparo / machofile
  machofile is a module to parse Mach-O binary files
  ☆90Updated this week
• ald3ns / XPR-dump
  Helper scripts to automate the extraction of YARA rules from XProtectRemediators
  ☆22Updated last year
• SentineLabs / aevt_decompile
  This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembl…
  ☆71Updated 5 years ago
• redcanaryco / redcanary-ebpf-sensor
  Red Canary's eBPF Sensor
  ☆113Updated 7 months ago