Recruit-CSIRT / macOSTriageTool
A DFIR tool to collect artifacts on macOS
☆53Updated 4 years ago
Alternatives and similar repositories for macOSTriageTool:
Users that are interested in macOSTriageTool are comparing it to the libraries listed below
- R-CSIRT Linux Triage tool☆37Updated 6 years ago
- A DFIR tool to analyze artifacts on macOS☆31Updated 4 years ago
- macOS Artifact Intelligence Tool☆13Updated 5 years ago
- CDIR Analyzer - parsers for data collected by CDIR Collector☆18Updated last year
- A script to track malware IOCs with OSINT on Twitter.☆52Updated 8 months ago
- A rewrite of mactime, a bodyfile reader☆37Updated 5 months ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆15Updated 10 months ago
- Carves and recreates VSS catalog and store from Windows disk image.☆96Updated last year
- macOS triage is a python script to collect various macOS logs, artifacts, and other data.☆26Updated 3 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆41Updated 3 years ago
- Yet another registry parser☆130Updated 2 years ago
- A happy place for detection engineers, purple teamers and threat hunters focusing on macOS.☆21Updated 2 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆89Updated last year
- ☆23Updated 5 years ago
- Website crawler with YARA detection☆88Updated last year
- Performs OCR on image files and scans them for matches to YARA rules☆40Updated 6 years ago
- pollen - A command-line tool for interacting with TheHive☆35Updated 5 years ago
- A DFVFS Backed Forensic Viewer☆41Updated 4 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated last year
- Converting data from services like Censys and Shodan to a common data model☆48Updated 4 months ago
- Sandbox feature upgrade with the help of wrapped samples☆75Updated 6 years ago
- Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...☆36Updated 7 years ago
- Different DFIR and CTI utilities☆36Updated 4 years ago
- ☆24Updated 2 years ago
- Cuckoo Sandbox plugin for extracts configuration data of known malware☆135Updated last year
- Because phishtank was taken.. explore phishing kits in a contained environment!☆45Updated 2 years ago
- Script that checks for available updates for the most commonly used Digital Forensics tools☆58Updated 4 years ago
- A YARA Rule Performance Measurement Tool☆58Updated 10 months ago