Alternatives and similar repositories for macApfsMounter:

Users that are interested in macApfsMounter are comparing it to the libraries listed below

• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated 10 months ago
• zerber0s / mac_int
  macOS Artifact Intelligence Tool
  ☆13Updated 5 years ago
• tedsmith / NSRL-Stripper
  A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database
  ☆14Updated 3 years ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆15Updated last year
• AbdulRhmanAlfaifi / CryptnetURLCacheParser
  CryptnetURLCacheParser is a tool to parse CryptAPI cache files
  ☆16Updated 7 months ago
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆30Updated last year
• bgrundy / cheatsheets-forensic
  Forensic cheatsheets for use with cheat
  ☆15Updated 3 years ago
• LincolnLandForensics / HodgePodge
  /ˈhäjˌpäj/ "a confused mixture."
  ☆12Updated this week
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• dwmetz / Axiom-PowerShell
  PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
  ☆10Updated 6 months ago
• 00010111 / gMetaDataParse
  ☆20Updated last week
• kacos2000 / Win10LiveInfo
  Windows 10 Live Information viewer
  ☆36Updated 3 years ago
• AndrewRathbun / SANSGoldPaperResearch_FOR500_Rathbun
  A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.
  ☆26Updated 2 years ago
• cclgroupltd / chrome-profile-view
  Python web app for previewing data in a Chrome Profile Folder
  ☆19Updated 8 months ago
• cclgroupltd / mister-skinnylegs
  mister-skinnylegs is an open plugin framework for parsing website/webapp artifacts in browser data. It currently provides a command line …
  ☆13Updated 5 months ago
• Silv3rHorn / 4n6_misc
  Miscellaneous Scripts
  ☆17Updated 4 years ago
• ruppde / yara_rules
  Yara rules
  ☆21Updated last year
• jschicht / MftCarver
  Carve $MFT records from a chunk of data (for instance a memory dump)
  ☆16Updated 8 years ago
• cclgroupltd / ccl-segb
  Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.
  ☆18Updated 10 months ago
• stark4n6 / ZipWalker
  A simple easy script to read the contents of a zip folder and extract metadata
  ☆11Updated 4 months ago
• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 4 years ago
• Hestat / calamity
  A script to assist in processing forensic RAM captures for malware triage
  ☆27Updated 4 years ago
• 4n6ist / bulk_extractor-rec
  It is based on bulk_extractor (https://github.com/simsong/bulk_extractor) and add scanners for record carving
  ☆40Updated 4 years ago
• Silv3rHorn / autoripy
  Attempt to replicate the functions of auto_rip by Corey Harrell in Python.
  ☆13Updated 7 months ago
• MattETurner / DFIRlogbook
  Logbook for Digital Forensics and Incident Response
  ☆50Updated 8 months ago
• Beercow / DFIR_Toolbar
  ☆12Updated last month
• gajos112 / SRUM-Timeliner
  ☆10Updated last year
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆18Updated 3 years ago
• net-protect / google-fs-recover
  Google Filestream Forensic Tool
  ☆16Updated 3 years ago
• dfirlabs / ntfs-specimens
  NTFS file system specimens
  ☆13Updated last year