Alternatives and similar repositories for MacResponse-Forensics:

Users that are interested in MacResponse-Forensics are comparing it to the libraries listed below

• joswr1ght / nm2lp
  Convert Windows Netmon Monitor Mode Wireless Packet Captures to Libpcap Format
  ☆15Updated 5 years ago
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆50Updated 3 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆21Updated 6 years ago
• sud0man / pac4mac
  Automatically exported from code.google.com/p/pac4mac
  ☆40Updated 5 years ago
• ahoog42 / ios-triage
  incident response tool for iOS devices
  ☆49Updated 2 years ago
• williballenthin / LfLe
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆27Updated 9 years ago
• vivisect / dissect
  vstruct based dissectors for various file/protocol formats
  ☆15Updated 7 years ago
• gdbinit / readphysmem
  A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.
  ☆25Updated 9 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 7 years ago
• mac4n6 / HFSPlus_Resources
  Resources for HFS+ Forensics
  ☆35Updated 9 years ago
• sandialabs / mac-sandbox
  This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)
  ☆21Updated 8 years ago
• cclgroupltd / ccl-asl
  Python Module for parsing Apple ASL Logs
  ☆14Updated 8 years ago
• Rurik / Java_IDX_Parser
  Parses Java Cache IDX files
  ☆39Updated 6 years ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆34Updated last year
• mandiant / macOS-tools
  ☆41Updated 7 years ago
• carlpulley / volatility
  A collection of Volatility Framework plugins.
  ☆26Updated 11 years ago
• mbrown1413 / SqliteFind
  A Volatility plugin for finding sqlite database rows
  ☆22Updated 5 years ago
• Yara-Rules / r2yara
  r2yara - Module for Yara using radare2 information
  ☆34Updated last year
• colincowie / viper-plugins
  Plugins for the Viper Framework
  ☆14Updated 5 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• mandiant / rvmi-rekall
  Rekall Forensics and Incident Response Framework with rVMI extensions
  ☆33Updated 3 years ago
• jndok / ropnroll
  An OSX exploitation helper library.
  ☆34Updated 9 years ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆33Updated 10 months ago
• benb116 / Gone-Phishing-2
  New and Improved
  ☆16Updated 8 years ago
• blacktop / language-yara
  Yara syntax highlighting
  ☆25Updated 3 years ago
• scudette / memory-analysis
  A Rekall interactive document for a Memory Analysis workshop/course.
  ☆43Updated 7 years ago
• 0xcpu / bonomen
  BONOMEN - Hunt for Malware Critical Process Impersonation
  ☆47Updated 4 years ago
• FreddieWitherden / libforensic1394
  A library for performing memory forensics over the IEEE 1394 interface.
  ☆18Updated 6 years ago