A powerful macOS triage collection tool designed for forensic analysis. It gathers critical system artifacts such as FSEvents, Spotlight, Unified Logs, user data and many more, while preserving the original macOS file system structure. Ideal for incident response, digital forensics, and security investigations.
☆49Oct 24, 2025Updated 11 months ago
Alternatives and similar repositories for Mac-Triage
Users that are interested in Mac-Triage are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR☆52Sep 13, 2026Updated last month
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆34Mar 16, 2026Updated 6 months ago
- Quick script to build host or investigation timelines using Carbon Black Response☆12Sep 25, 2018Updated 8 years ago
- macOS forensic acquisition made simple☆310Jun 2, 2026Updated 4 months ago
- An AWS CloudTrail exported logs analyzer tool☆21Oct 7, 2026Updated last week
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Forensic cheatsheets for use with cheat☆16Dec 2, 2021Updated 4 years ago
- Python web app for previewing data in a Chrome Profile Folder☆28Jul 1, 2024Updated 2 years ago
- A series of python scripts to extract information from Dark Web Applications☆14Mar 26, 2025Updated last year
- Automatic, fast parsing of browser artifacts☆17Jan 4, 2025Updated last year
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆376Sep 8, 2026Updated last month
- USN Journal full path builder☆69Apr 16, 2026Updated 5 months ago
- Suzaku (朱雀) is a sigma-based threat hunting and fast forensics timeline generator for cloud logs.☆224Oct 5, 2026Updated last week
- ☆12Aug 3, 2018Updated 8 years ago
- macOS Artifacts☆33Mar 2, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Takajō (鷹匠) is a Hayabusa results analyzer.☆166Jul 11, 2026Updated 3 months ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Parser for Sdba memory pool tags☆20Jul 16, 2021Updated 5 years ago
- OneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat a…☆246Sep 15, 2026Updated last month
- ☆24Sep 7, 2026Updated last month
- This tool parses Windows EVTX logs to extract login and logout sessions from a security.evtx file. It uses a Tkinter GUI to let you selec…☆32Feb 22, 2025Updated last year
- Bash tool used for proactive detection of malicious activity on macOS systems.☆40Sep 29, 2025Updated last year
- A forensic analysis framework for enumerating slack artifacts residing in the Operating system.☆18Sep 23, 2025Updated last year
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…☆36Jun 5, 2026Updated 4 months ago
- mister-skinnylegs is an open plugin framework for parsing website/webapp artifacts in browser data. It currently provides a command line …☆21Jul 20, 2026Updated 2 months ago
- Contains compiled binaries of Volatility☆37May 18, 2025Updated last year
- A hex viewer for the sleuths!☆19Nov 7, 2025Updated 11 months ago
- DFIR notebooks GCIH Gold project, paper☆12Apr 30, 2015Updated 11 years ago
- Invoke-Forensics provides PowerShell commands to simplify working with the forensic tools KAPE and RegRipper.☆119Nov 28, 2023Updated 2 years ago
- A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and rea…☆123Aug 4, 2026Updated 2 months ago
- Quick ESXi Log Parser☆33Jul 21, 2026Updated 2 months ago
- Scripts to process macOS forensic artifacts☆210Aug 4, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- macOS (& ios) Artifact Parsing Tool☆1,092Updated this week
- Open-source digital forensics (DFIR) toolkit with a desktop GUI: analyse E01, AFF4, raw/dd and VMDK disk images, recover deleted files by…☆225Updated this week
- ☆18Jun 4, 2025Updated last year
- macOS .DS_Store Parser☆81Aug 17, 2021Updated 5 years ago
- a simple python script to de-obfuscate ABOBUS Batch script obfuscator☆10Jan 2, 2025Updated last year
- Parses USB connection artifacts from offline Registry hives☆108Feb 8, 2026Updated 8 months ago
- A YARA & Malware Analysis Toolkit written in Rust.☆117Sep 30, 2026Updated 2 weeks ago