MacOS forensic collector for Velociraptor. 70 artefacts covering browsers, communications, user activity, persistence, security, logs, file system, and system configuration. Requires FDA for full coverage. Extract with bsdtar to APFS and parse with any open source parsing tool.
☆16May 26, 2026Updated 5 months ago
Alternatives and similar repositories for MacOS-Velociraptor-Collectors
Users that are interested in MacOS-Velociraptor-Collectors are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This tool aims at parsing Microsoft Protection logs to provide relevant data to forensic analysts during incident responses.☆22Sep 30, 2022Updated 4 years ago
- Open-source desktop workbench for digital forensic analysis. Inspect ZIP/TAR/7z/UFDR archives, raw disk images/EWF, and iTunes/Android ba…☆107Updated this week
- Browse Windows Recycle Bin from E01 forensic images with Explorer-style interface. Parse $I/$R artifacts, view deleted files in original …☆18Dec 16, 2025Updated 10 months ago
- Get-NetScalerTimeline - Automated File System Timeline Creation for NetScaler ADC/Gateway (DFIR)☆14Oct 4, 2026Updated 3 weeks ago
- Script that uses exiftool and c2pa to identify metadata tags that indicate AI generation☆15Dec 27, 2025Updated 10 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Script to decode Fortinet binary firewall logs.☆13Dec 12, 2025Updated 10 months ago
- A unified investigation cockpit built for CSIRT / SOC / DFIR teams. Ingest, correlate and visualise any forensic source in a real-time in…☆45Oct 14, 2026Updated 2 weeks ago
- A preconfigured Velociraptor triage collector☆79Oct 19, 2026Updated last week
- A modified fork of Be.HexEditor for use in debug tools☆15Jan 5, 2022Updated 4 years ago
- $I30 INDX Carver☆18Jun 23, 2025Updated last year
- ☆31Feb 12, 2026Updated 8 months ago
- Windows Forensics Salt States☆23Oct 22, 2026Updated last week
- Dissectify — macOS Forensic Analysis Toolkit. Collection health validation, 61 artifact parsers, XLSX export, and Velociraptor collector …☆52Aug 17, 2026Updated 2 months ago
- StickyParser - Sticky Notes Forensic. A Windows Sticky Notes Praser (snt and plum.sqlite supported). Additional Feature: SQLite Recovery …☆24Jul 18, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆86Feb 4, 2026Updated 8 months ago
- ☆36Jan 11, 2023Updated 3 years ago
- DLEAPP — Desktop Logs Events And Protobuf Parser. A LEAPP for triaging desktop-application artifacts (Electron/Chromium).☆31Updated this week
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- The ultimate repository for remotely deploying Crowdstrike sensors quickly and discreetly on any other EDR platform.☆26Aug 12, 2025Updated last year
- PowerShell-based Automation of Defender for Endpoint☆197Jul 3, 2025Updated last year
- A simple script to decrypt obscured/encrypted passwords from rclone☆29Feb 26, 2023Updated 3 years ago
- Windows symbol tables for Volatility 3☆100Jul 11, 2024Updated 2 years ago
- FJTA (Forensic Journal Timeline Analyzer) is a tool that analyzes Linux filesystem (ext4, XFS) journals (not systemd-journald logs), gene…☆114Apr 8, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ESXi Cyber Security Incident Response Script☆29Sep 4, 2024Updated 2 years ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆382Sep 8, 2026Updated last month
- ☆24Mar 12, 2025Updated last year
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆24Aug 3, 2024Updated 2 years ago
- A tool for AWS incident response, that allows for enumeration, acquisition and analysis of data from AWS environments for the purpose of …☆207Aug 11, 2026Updated 2 months ago
- Publicly shareable windows event log message data☆29Nov 29, 2019Updated 6 years ago
- Windows event log anomaly detection powered by ATPA technologies☆26Dec 22, 2022Updated 3 years ago
- Repo to hold mcp server for velociraptor☆41Oct 11, 2026Updated 2 weeks ago
- Comprehensive adversary emulation tool for security testing on Google Cloud Platform (GCP) environments.☆14Jun 14, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- A repo that contains links to projects by members of the Digital Forensics Discord Server! This is meant to help promote projects made by…☆25Apr 23, 2026Updated 6 months ago
- Generate realistic synthetic security logs for cybersecurity threat hunting training and research☆289Updated this week
- A hex viewer for the sleuths!☆19Nov 7, 2025Updated 11 months ago
- A series of python scripts to extract information from SQLite Data Files☆23Nov 15, 2025Updated 11 months ago
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆120Jan 26, 2022Updated 4 years ago
- FIT is a modular suite of Python applications for digital forensic acquisition of online contents such as web pages, emails, social media…☆106Mar 6, 2026Updated 7 months ago