A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight, Unified Logs, user data and many more, while preserving the original macOS file system structure. Ideal for incident response, digital forensics, and security investigations.
☆50Oct 24, 2025Updated last year
Alternatives and similar repositories for Mac-Triage
Users that are interested in Mac-Triage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆36Mar 16, 2026Updated 7 months ago
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆54Sep 13, 2026Updated last month
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 8 years ago
- macOS forensic acquisition made simple☆319Jun 2, 2026Updated 5 months ago
- Automated pipeline for generating forensic timelines from Magnet Response collections.☆15Nov 6, 2025Updated 11 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- An AWS CloudTrail exported logs analyzer tool☆21Oct 7, 2026Updated 3 weeks ago
- Automate forensic traige package collection and evidence parsing with KAPE and Crowdstrike☆15Mar 5, 2022Updated 4 years ago
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- Takajō (鷹匠) is a Hayabusa results analyzer.☆167Oct 25, 2026Updated last week
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- A series of python scripts to extract information from Dark Web Applications☆14Mar 26, 2025Updated last year
- Scripts to set MacOSX security, mainly to satisfy PCI DSS requirements☆10Mar 7, 2018Updated 8 years ago
- Tools and scripts to deploy and manage OpenRelik instances☆17Mar 23, 2026Updated 7 months ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- ReWrite of AChoir in Go for Cross Platform forensic artifact collection and processing☆43May 18, 2026Updated 5 months ago
- Parses USB connection artifacts from offline Registry hives☆109Feb 8, 2026Updated 8 months ago
- Python web app for previewing data in a Chrome Profile Folder☆28Jul 1, 2024Updated 2 years ago
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆386Sep 8, 2026Updated last month
- Follow the trail of breadcrumbs left behind by any user on a computer or mounted disk image.☆31Aug 28, 2025Updated last year
- Scripts to enhance efficency and security of MacOS in a government environment☆17Jan 27, 2026Updated 9 months ago
- All in one script for hardening and applying common tweaks to Mac OS systems☆18Jan 23, 2019Updated 7 years ago
- ☆24Mar 12, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- macOS (& ios) Artifact Parsing Tool☆1,098Updated this week
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆235Oct 27, 2026Updated last week
- macOS Artifacts☆33Mar 2, 2025Updated last year
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆119Nov 28, 2023Updated 2 years ago
- A Model Context Protocol (MCP) server that integrates Volatility 3 memory forensics framework with Claude☆42Jul 7, 2025Updated last year
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆247Sep 15, 2026Updated last month
- Deep Packet Inspection • Traffic Forensics • Network Threat Detection☆56Feb 20, 2026Updated 8 months ago
- USN Journal full path builder☆71Apr 16, 2026Updated 6 months ago
- A tool for fetching DFIR and other GitHub tools.☆32Sep 17, 2026Updated last month
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Contains compiled binaries of Volatility☆37Oct 19, 2026Updated 2 weeks ago
- Open-source memory forensics platform for DFIR, threat hunting, malware analysis, and incident response.☆29Oct 5, 2026Updated 3 weeks ago
- A collection of PowerShell scripts designed to transform raw forensic data into formats suitable for analysis☆12Jan 18, 2026Updated 9 months ago
- The BTP Trust Store is a list of trusted X.509 certificates of Root Certificate Authorities that are used by BTP, and which shall be used…☆23Jun 3, 2026Updated 5 months ago
- A browser-based Digital Forensics and Incident Response (DFIR) tool for parsing, analyzing, and triaging FortiGate firewall logs.☆12Apr 11, 2026Updated 6 months ago
- Bash tool used for proactive detection of malicious activity on macOS systems.☆40Sep 29, 2025Updated last year
- macOS triage is a python script to collect various macOS logs, artifacts, and other data.☆26Mar 25, 2021Updated 5 years ago