Mapping XProtect's obfuscated malware family names to common industry names.
☆96Sep 2, 2026Updated last month
Alternatives and similar repositories for XProtect-Malware-Families
Users that are interested in XProtect-Malware-Families are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 3 years ago
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Mar 5, 2024Updated 2 years ago
- ☆57Jul 1, 2024Updated 2 years ago
- List of legitimate macOS apps doing not great things☆35Feb 11, 2022Updated 4 years ago
- A Binary Ninja plugin for analyzing Swift binaries☆28Oct 20, 2025Updated 11 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A cross platform parser for Apple UnifiedLogs!☆380Oct 10, 2026Updated last week
- This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembl…☆74Jan 12, 2021Updated 5 years ago
- Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.☆29Sep 29, 2025Updated last year
- A module to expose the Endpoint Security library to Swift☆20Jul 10, 2019Updated 7 years ago
- Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…☆81Nov 21, 2023Updated 2 years ago
- Track Apple software update changes with Github Actions☆28Feb 11, 2022Updated 4 years ago
- macOS Security Research☆123Mar 15, 2024Updated 2 years ago
- Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…☆98Sep 14, 2022Updated 4 years ago
- ☆12Oct 22, 2025Updated 11 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Python scripts for parsing IDA TIL files.☆29Jul 16, 2021Updated 5 years ago
- File Monitor Library (based on Apple's new Endpoint Security Framework)☆384Oct 9, 2022Updated 4 years ago
- A local-first web interface for managing Tart VMs on Apple Silicon macOS.☆20Mar 15, 2026Updated 7 months ago
- Swift code to programmatically perform dylib injection☆54Oct 29, 2022Updated 3 years ago
- Programmatic Electron fuse detection☆21Jul 2, 2024Updated 2 years ago
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated last year
- CVE-2022-22639: Get a Root Shell on macOS Monterey☆123Apr 5, 2022Updated 4 years ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆70Jul 1, 2020Updated 6 years ago
- a open source rat from china☆27Oct 28, 2016Updated 9 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A user-mode application authorization system for MacOS written in Swift☆298Sep 18, 2020Updated 6 years ago
- Swift 5 macOS agent☆117Jul 23, 2024Updated 2 years ago
- Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…☆551Updated this week
- Process Monitor Library (based on Apple's new Endpoint Security Framework)☆509Oct 20, 2023Updated 2 years ago
- A library to parse macOS FsEvents☆26Aug 28, 2022Updated 4 years ago
- This JavaScript CLI "undeletes' packages that have been removed from the NPM registry☆35Oct 6, 2026Updated last week
- ☆26Oct 22, 2025Updated 11 months ago
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆41Oct 29, 2024Updated last year
- This is a repository for the public blog with Labs indicators of compromise and code☆18Jan 8, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Tiny tool to reveal notarized applications☆24Dec 25, 2018Updated 7 years ago
- Swift CLI for Apple School & Business Manager APIs — get devices info and assign/unassign Device Management Services in bulk.☆143Updated this week
- Repository of Information sharing on threats and indicators☆12Mar 21, 2020Updated 6 years ago
- information and tools to understand the internals of Apple’s operating systems☆208Jul 27, 2026Updated 2 months ago
- ☆15Sep 26, 2020Updated 6 years ago
- Binary Ninja plugin for exploring Structured Exception Handlers☆86Jun 6, 2024Updated 2 years ago
- A late bound, hope-for-the-best dyld shared cache extractor☆15Feb 13, 2022Updated 4 years ago