Mapping XProtect's obfuscated malware family names to common industry names.
☆96Sep 2, 2026Updated 2 months ago
Alternatives and similar repositories for XProtect-Malware-Families
Users that are interested in XProtect-Malware-Families are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 3 years ago
- XProtect Remediator "secret" configurations☆12Nov 17, 2025Updated 11 months ago
- ☆56Jul 1, 2024Updated 2 years ago
- A decompiler for run-only applescripts☆14Feb 21, 2026Updated 8 months ago
- ☆13Dec 15, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Mar 5, 2024Updated 2 years ago
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated last year
- macOS XProtect definition files☆40Mar 25, 2022Updated 4 years ago
- This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembl…☆74Jan 12, 2021Updated 5 years ago
- List of legitimate macOS apps doing not great things☆35Feb 11, 2022Updated 4 years ago
- A Binary Ninja plugin for analyzing Swift binaries☆29Oct 20, 2025Updated last year
- A cross platform parser for Apple UnifiedLogs!☆390Updated this week
- Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated☆60Mar 12, 2021Updated 5 years ago
- A module to expose the Endpoint Security library to Swift☆20Jul 10, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆11Nov 14, 2023Updated 2 years ago
- machofile is a module to parse Mach-O binary files☆99Feb 10, 2026Updated 8 months ago
- Swift 5 macOS agent☆117Jul 23, 2024Updated 2 years ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…☆98Sep 14, 2022Updated 4 years ago
- Track Apple software update changes with Github Actions☆28Feb 11, 2022Updated 4 years ago
- File Monitor Library (based on Apple's new Endpoint Security Framework)☆389Oct 9, 2022Updated 4 years ago
- CVE-2022-22639: Get a Root Shell on macOS Monterey☆123Apr 5, 2022Updated 4 years ago
- Desktop application for MacOS calling Microsoft Graph. It's written in swift and uses the Microsoft identity platform☆12Jan 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- http://www.radare.org/☆16Oct 9, 2026Updated 3 weeks ago
- macOS Security Research☆123Mar 15, 2024Updated 2 years ago
- ☆12Oct 22, 2025Updated last year
- A minimal malware analysis sandbox for macOS☆35Feb 15, 2023Updated 3 years ago
- Aftermath is a free macOS IR framework☆603Sep 25, 2025Updated last year
- Minimal Indicator Storage System☆12Feb 8, 2021Updated 5 years ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆70Jul 1, 2020Updated 6 years ago
- A user-mode application authorization system for MacOS written in Swift☆297Sep 18, 2020Updated 6 years ago
- Programmatic Electron fuse detection☆21Jul 2, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Mach-O file structure☆14Jul 19, 2026Updated 3 months ago
- A learning project by Mike Levenick that can convert Smart Groups in Jamf Pro to either Advanced Searches or Static Groups.☆17Jan 28, 2019Updated 7 years ago
- a open source rat from china☆27Oct 28, 2016Updated 10 years ago
- "The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.☆1,401Updated this week
- Process Monitor Library (based on Apple's new Endpoint Security Framework)☆512Oct 20, 2023Updated 3 years ago
- Lena's scripts/code/resources for malware analysis☆26Jun 13, 2024Updated 2 years ago
- Tracking public statements by Governments on the attribution of state-sponsored cyber attacks.☆13Aug 27, 2025Updated last year