Alternatives and similar repositories for endpoint-sec

Users that are interested in endpoint-sec are comparing it to the libraries listed below

• SentineLabs / XProtect-Malware-Families
  Mapping XProtect's obfuscated malware family names to common industry names.
  ☆89Updated last week
• securing / SimpleXPCApp
  Secure example of an XPC helper written in Swift
  ☆109Updated 5 years ago
• themittenmac / TrueTree
  A command line tool for pstree-like output on macOS with additional pid capturing capabilities
  ☆266Updated last year
• theevilbit / Shield
  An app to protect against process injection and suspicious file links on macOS
  ☆230Updated 4 years ago
• ConradSun / NuwaStone
  A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).
  ☆48Updated 3 months ago
• PhorionTech / Kronos
  Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…
  ☆76Updated last year
• willyu-elastic / SimpleEndpoint
  Sample code for macOS Extensions Part 3
  ☆24Updated 5 years ago
• mandiant / macos-UnifiedLogs
  A cross platform parser for Apple UnifiedLogs!
  ☆290Updated last month
• Omar-Ikram / EndpointSecurityDemo
  This is a complete Xcode project of the Endpoint Security Demo gist: https://gist.github.com/Omar-Ikram/8e6721d8e83a3da69b31d4c2612a68ba
  ☆20Updated 10 months ago
• indygreg / apple-platform-rs
  Rust crates supporting Apple platform development
  ☆724Updated 2 weeks ago
• libyal / dtformats
  Collection of data formats
  ☆181Updated last month
• Hugal31 / yara-rust
  Rust bindings for VirusTotal/Yara
  ☆80Updated 8 months ago
• objective-see / FileMonitor
  File Monitor Library (based on Apple's new Endpoint Security Framework)
  ☆362Updated 3 years ago
• knightsc / EndpointSecurity
  A module to expose the Endpoint Security library to Swift
  ☆20Updated 6 years ago
• cugu / apfs.ksy
  APFS filesystem format for Kaitai Struct
  ☆82Updated 3 years ago
• aronskaya / smjobbless
  A showcase for launching Privileged Helper via SMJobBless() and communicating with it using XPC.
  ☆100Updated 3 years ago
• wowsignal-io / pedro
  Pipeline EDR Observer - A lightweight, open source EDR for Linux
  ☆16Updated 3 weeks ago
• 0xmachos / Apple-Platform-Security-Guides
  Every Apple Platform Security Guide
  ☆164Updated last year
• objective-see / ProcessMonitor
  Process Monitor Library (based on Apple's new Endpoint Security Framework)
  ☆477Updated 2 years ago
• olbartek / MachOReader
  Mach-O file format reader, written entirely in Swift
  ☆11Updated 5 years ago
• n4r1b / ferrisetw
  Basically a KrabsETW rip-off written in Rust
  ☆77Updated 3 weeks ago
• mullvad / pfctl-rs
  Library and CLI for interfacing with the PF firewall on macOS
  ☆88Updated last month
• nmggithub / Kass
  Kass: A security research tool.
  ☆96Updated last week
• l0psec / arm64_macOS_Syscalls
  ☆54Updated last year
• gyunaev / macprocmon
  MacOS X process monitor using EndpointSecurity extension.
  ☆37Updated last month
• kornelski / rust-security-framework
  Bindings to the macOS Security.framework
  ☆281Updated 3 weeks ago
• 0xbf00 / simbple
  macOS Sandbox Profile Language (SBPL) Interpreter
  ☆55Updated 5 years ago
• Alkenso / sEndpointSecurity
  ☆11Updated last year
• obelisk / endpointsecurity
  Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.
  ☆20Updated last year
• vastlimits / esmat
  macOS Endpoint Security Message Analysis Tool
  ☆47Updated 3 years ago