Sentinel-One / foss
☆38Updated 2 years ago
Alternatives and similar repositories for foss:
Users that are interested in foss are comparing it to the libraries listed below
- OSX Events Monitor☆22Updated 6 years ago
- Parse the Mac Quickook index.sqlite database☆53Updated 8 years ago
- Audit Preference Pane and Log Reader for OS X☆39Updated 11 years ago
- Keyjacker enumerates Mac keychains and displays plain text passwords.☆23Updated 7 years ago
- Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.☆104Updated 7 years ago
- Notifies the user when macOS Security components like Gatekeeper and XProtect have been updated☆61Updated 4 years ago
- A little tool to download a complete macOS installer application from Apple updates catalogs.☆38Updated 2 weeks ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆68Updated 4 years ago
- Automatically exported from code.google.com/p/pac4mac☆40Updated 6 years ago
- View all modules on that are loaded in the OS kernel☆72Updated 2 years ago
- XProtect configuration files stats☆20Updated 7 years ago
- Mapping XProtect's obfuscated malware family names to common industry names.☆84Updated 10 months ago
- Python utilities related to plists☆54Updated last year
- Resources for HFS+ Forensics☆36Updated 9 years ago
- [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.☆177Updated 4 years ago
- macOS/iOS database location scraper to extract location data☆80Updated 2 years ago
- Slides and material from my conference presentations☆15Updated 11 months ago
- macOS workflow to create disk images with special focus on InfoSec (S/MIME encryption)☆21Updated 7 years ago
- ☆33Updated 12 years ago
- Recipes for the Mac OS X system administration tool, Autopkg☆13Updated 2 months ago
- Research about malware that infects the EFI and SMC of Apple MacBooks.☆57Updated last year
- Dump the iOS Frequent Location binary plist files☆83Updated 6 years ago
- example project, utilizing Proc Info library☆70Updated 4 years ago
- A minimal malware analysis sandbox for macOS☆28Updated 2 years ago
- A Mac app that uses the Duo Labs EFIgy API to inform you about the state of your EFI firmware.☆40Updated 5 years ago
- macOS XProtect definition files☆40Updated 2 years ago
- Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format☆39Updated 3 years ago
- This script is used in the recovery partition to automatically disable SIP.☆29Updated 8 years ago
- A module to expose the Endpoint Security library to Swift☆20Updated 5 years ago