Mapping XProtect's obfuscated malware family names to common industry names.
☆94Sep 2, 2026Updated 3 weeks ago
Alternatives and similar repositories for XProtect-Malware-Families
Users that are interested in XProtect-Malware-Families are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Mar 5, 2024Updated 2 years ago
- ☆57Jul 1, 2024Updated 2 years ago
- List of legitimate macOS apps doing not great things☆35Feb 11, 2022Updated 4 years ago
- macOS XProtect definition files☆40Mar 25, 2022Updated 4 years ago
- A cross platform parser for Apple UnifiedLogs!☆377Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembl…☆74Jan 12, 2021Updated 5 years ago
- Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated☆60Mar 12, 2021Updated 5 years ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated 11 months ago
- A module to expose the Endpoint Security library to Swift☆20Jul 10, 2019Updated 7 years ago
- Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…☆81Nov 21, 2023Updated 2 years ago
- Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…☆98Sep 14, 2022Updated 4 years ago
- Desktop application for MacOS calling Microsoft Graph. It's written in swift and uses the Microsoft identity platform☆13Jan 12, 2024Updated 2 years ago
- ☆12Oct 22, 2025Updated 11 months ago
- Python scripts for parsing IDA TIL files.☆29Jul 16, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago
- A local-first web interface for managing Tart VMs on Apple Silicon macOS.☆20Mar 15, 2026Updated 6 months ago
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated last year
- Swift code to programmatically perform dylib injection☆54Oct 29, 2022Updated 3 years ago
- Programmatic Electron fuse detection☆21Jul 2, 2024Updated 2 years ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆70Jul 1, 2020Updated 6 years ago
- CVE-2022-22639: Get a Root Shell on macOS Monterey☆123Apr 5, 2022Updated 4 years ago
- macOS Security Research☆123Mar 15, 2024Updated 2 years ago
- Swift 5 macOS agent☆117Jul 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A user-mode application authorization system for MacOS written in Swift☆298Sep 18, 2020Updated 6 years ago
- Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…☆552Sep 6, 2026Updated 3 weeks ago
- Process Monitor Library (based on Apple's new Endpoint Security Framework)☆505Oct 20, 2023Updated 2 years ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.☆14Jul 18, 2018Updated 8 years ago
- A library to parse macOS FsEvents☆26Aug 28, 2022Updated 4 years ago
- Track Apple software update changes with Github Actions☆28Feb 11, 2022Updated 4 years ago
- ☆26Oct 22, 2025Updated 11 months ago
- This JavaScript CLI "undeletes' packages that have been removed from the NPM registry☆35Sep 2, 2026Updated 3 weeks ago
- Tiny tool to reveal notarized applications☆24Dec 25, 2018Updated 7 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- This is a repository for the public blog with Labs indicators of compromise and code☆18Jan 8, 2020Updated 6 years ago
- Swift CLI for Apple School & Business Manager APIs — get devices info and assign/unassign Device Management Services in bulk.☆141Sep 2, 2026Updated 3 weeks ago
- information and tools to understand the internals of Apple’s operating systems☆207Jul 27, 2026Updated 2 months ago
- Binary Ninja plugin for exploring Structured Exception Handlers☆86Jun 6, 2024Updated 2 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆19Oct 7, 2016Updated 9 years ago
- A late bound, hope-for-the-best dyld shared cache extractor☆15Feb 13, 2022Updated 4 years ago
- Every OS X/ macOS white paper☆115Apr 14, 2020Updated 6 years ago