A triage data collection script for macOS
☆30Nov 27, 2020Updated 5 years ago
Alternatives and similar repositories for macOSTriageCollectionScript
Users that are interested in macOSTriageCollectionScript are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Capture. Detonate. Collect☆14Sep 20, 2024Updated last year
- A script to assist in processing forensic RAM captures for malware triage☆26Feb 4, 2021Updated 5 years ago
- macOS Artifact Intelligence Tool☆13Apr 30, 2019Updated 7 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Mar 12, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CertWatcher is a new take on monitoring for phishing sites. It is meant to be a set and forget service that will send you a daily report …☆10Oct 12, 2020Updated 5 years ago
- This repository is a resource that allows us to distribute scripts across multiple MDM tenants with a single point of hosting.☆16May 21, 2025Updated last year
- This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.☆15Jul 13, 2023Updated 3 years ago
- ☆33Feb 26, 2022Updated 4 years ago
- macOS triage is a python script to collect various macOS logs, artifacts, and other data.☆26Mar 25, 2021Updated 5 years ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆42May 18, 2026Updated 2 months ago
- A small tool to easily mount APFS image on macOS for forensics.☆17Jul 30, 2020Updated 6 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆93Mar 11, 2026Updated 4 months ago
- sudo-parser is a tool to audit complex sudoers files☆18Nov 2, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Repo for containing and managing office 365 scripts for my customers, techs and others. If you have any questions please feel free to hit…☆11Mar 27, 2022Updated 4 years ago
- Safe, Legal Search and Destroy☆11Apr 17, 2026Updated 3 months ago
- AutoIt Analysis Library: Parser & Emulator For Malware Researchers☆22Apr 27, 2019Updated 7 years ago
- A suite of Volatility 3 plugins for memory forensics of Docker containers☆18Jan 10, 2024Updated 2 years ago
- Node utility to inline images, CSS and JavaScript for a web page - useful for mobile sites☆16Mar 17, 2020Updated 6 years ago
- A curated list of KAPE-related resources☆191May 1, 2025Updated last year
- A parsing tool for backgrounditems.btm☆54Aug 23, 2024Updated last year
- The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images☆89Aug 29, 2023Updated 2 years ago
- Thawne is a Sentinel for your Program. A trojan that Reinfects systems. It installs itself on the system it's Executed on. After which Th…☆10Oct 13, 2020Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Repo of python/bash scripts for identifying IoC's in threat feed and other online tools☆28Jul 27, 2020Updated 6 years ago
- F-Secure Lightweight Acqusition for Incident Response (FLAIR)☆16Jul 5, 2021Updated 5 years ago
- A parser for Unified logging tracev3 files☆100Jul 25, 2025Updated last year
- Attempt to replicate the functions of auto_rip by Corey Harrell in Python.☆12Aug 4, 2024Updated 2 years ago
- Just another useless C2 occupying space in some HDD somewhere.☆23Jul 4, 2023Updated 3 years ago
- An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.☆343Dec 3, 2025Updated 8 months ago
- Incremental Machine Leaning by example - Detecting suspicious activity in real time with Zeek data streams, River and JA3 hashes☆17Aug 10, 2022Updated 4 years ago
- ☆26Jul 23, 2024Updated 2 years ago
- Configure Internal iOS Settings, like SpringBoard, Carrier Settings, Mobile Asset Settings.☆10Mar 6, 2019Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Transcoding optimizations for Synology Photo☆13Jul 26, 2026Updated 2 weeks ago
- A pure PowerShell/ .NET DFIR capability that dumps the Windows SRUM (System Resource Usage Monitor) database to CSVs for analysis.☆14Oct 21, 2021Updated 4 years ago
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 2 years ago
- ☆33Oct 25, 2021Updated 4 years ago
- Distributed certificate transparency log harvester☆19Updated this week
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆41May 3, 2021Updated 5 years ago
- Crowdstrike response script containing various functions for IR/triage☆13Dec 7, 2020Updated 5 years ago