Recruit-CSIRT / macApfsMounter
A small tool to easily mount APFS image on macOS for forensics.
☆15Updated 4 years ago
Alternatives and similar repositories for macApfsMounter:
Users that are interested in macApfsMounter are comparing it to the libraries listed below
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆16Updated last year
- Just Another broken Registry Parser (JARP)☆16Updated 11 months ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆30Updated last year
- Forensic cheatsheets for use with cheat☆15Updated 3 years ago
- macOS Artifact Intelligence Tool☆13Updated 6 years ago
- /ˈhäjˌpäj/ "a confused mixture."☆13Updated this week
- Tools for macOS Forensic Bootable media☆15Updated 4 years ago
- Python web app for previewing data in a Chrome Profile Folder☆20Updated 10 months ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆20Updated 4 years ago
- ☆10Updated last year
- ☆20Updated last month
- PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.☆11Updated 8 months ago
- Windows 10 Live Information viewer☆36Updated 3 years ago
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆16Updated 9 months ago
- Logbook for Digital Forensics and Incident Response☆50Updated 9 months ago
- A script to assist in processing forensic RAM captures for malware triage☆27Updated 4 years ago
- Parser for Sdba memory pool tags☆18Updated 3 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆93Updated last year
- Search datasets for Bitlocker recovery files and triage live systems for Bitlocker keys.☆41Updated 3 months ago
- Attempt to replicate the functions of auto_rip by Corey Harrell in Python.☆13Updated 9 months ago
- It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving☆39Updated 5 years ago
- A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database☆14Updated 3 years ago
- A quick reference guide for python script development in DFIR☆16Updated last year
- Script that checks for available updates for the most commonly used Digital Forensics tools☆59Updated 4 years ago
- mister-skinnylegs is an open plugin framework for parsing website/webapp artifacts in browser data. It currently provides a command line …☆13Updated 3 weeks ago
- Forensic Artifact Collection Tool for macOS☆110Updated 7 months ago
- A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.☆27Updated 2 years ago
- Slides and material from my conference presentations☆16Updated last year
- Web app built to allow digital forensic professionals to search for the forensic tools that will parse artifacts from various apps.☆19Updated last week
- Yara rules☆21Updated 2 years ago