Alternatives and similar repositories for MacResponse-Forensics:

Users that are interested in MacResponse-Forensics are comparing it to the libraries listed below

• sud0man / pac4mac
  Automatically exported from code.google.com/p/pac4mac
  ☆40Updated 6 years ago
• laincode / latig0sx
  OSX Security Compliance & Hardening
  ☆49Updated 9 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆22Updated 6 years ago
• knightsc / XProtect
  macOS XProtect definition files
  ☆40Updated 2 years ago
• gdbinit / readphysmem
  A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.
  ☆25Updated 9 years ago
• carlpulley / volatility
  A collection of Volatility Framework plugins.
  ☆26Updated 11 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 7 years ago
• secretsquirrel / Shmoocon2016
  Materials from presentation
  ☆20Updated 9 years ago
• blacktop / language-yara
  Yara syntax highlighting
  ☆25Updated 3 years ago
• legbacore / t2e_integrity_check
  Integrity checking script for Apple Thunderbolt to Ethernet adapters, to check for attacks similar to Thunderstrike 2
  ☆26Updated 9 years ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆33Updated last year
• mbrown1413 / SqliteFind
  A Volatility plugin for finding sqlite database rows
  ☆22Updated 5 years ago
• colincowie / viper-plugins
  Plugins for the Viper Framework
  ☆14Updated 5 years ago
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆50Updated 3 years ago
• gdbinit / armorysandbox
  A USB armory based USB sandbox
  ☆20Updated 7 years ago
• sandialabs / mac-sandbox
  This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)
  ☆21Updated 8 years ago
• FreddieWitherden / libforensic1394
  A library for performing memory forensics over the IEEE 1394 interface.
  ☆18Updated 6 years ago
• iphelix / ida-pomidor
  IDA Pomidor is a plugin for Hex-Ray's IDA Pro disassembler that will help you retain concentration and productivity during long reversing…
  ☆35Updated 10 years ago
• williballenthin / LfLe
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆27Updated 9 years ago
• 504ensicsLabs / find_times
  Discover potential timestamps within the Windows Registry
  ☆18Updated 10 years ago
• joswr1ght / nm2lp
  Convert Windows Netmon Monitor Mode Wireless Packet Captures to Libpcap Format
  ☆15Updated 5 years ago
• vortessence / vortessence
  Automated memory forensics analysis
  ☆33Updated 5 years ago
• benb116 / Gone-Phishing-2
  New and Improved
  ☆17Updated 8 years ago
• vivami / grey_fox
  The grey fox
  ☆25Updated 8 years ago
• davehull / Mal-Seine
  Why hunt when you can seine?
  ☆21Updated 9 years ago
• REhints / BootkitsBook
  repository with additional materials and source code
  ☆30Updated 8 years ago
• 403labs / recon-ng_modules
  Recon-ng modules that won't get accepted into the main distribution because of 3rd party dependencies.
  ☆18Updated 11 years ago
• bsi-group / autorun-logger-server
  Server for receiving autorun data from the clients
  ☆13Updated 7 years ago
• ShellcodeSmuggler / IAT_POC
  POC for IAT Parsing Payloads
  ☆47Updated 8 years ago
• 0pc0deFR / YaraRules
  Multiple rules for yara-project for detect compiler/packer/protector
  ☆33Updated 5 years ago