ainfosec / MacResponse-Forensics

Related projects ⓘ

Alternatives and complementary repositories for MacResponse-Forensics

• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆21Updated 6 years ago
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆49Updated 3 years ago
• mac4n6 / HFSPlus_Resources
  Resources for HFS+ Forensics
  ☆35Updated 9 years ago
• williballenthin / LfLe
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆27Updated 9 years ago
• gdbinit / readphysmem
  A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.
  ☆25Updated 9 years ago
• joswr1ght / nm2lp
  Convert Windows Netmon Monitor Mode Wireless Packet Captures to Libpcap Format
  ☆15Updated 5 years ago
• fmartingr / iosfu
  iOS forensics utility
  ☆12Updated 6 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 7 years ago
• carlpulley / volatility
  A collection of Volatility Framework plugins.
  ☆26Updated 11 years ago
• mac4n6 / iOS-Frequent-Locations-Dumper
  Dump the iOS Frequent Location binary plist files
  ☆82Updated 6 years ago
• gdbinit / armorysandbox
  A USB armory based USB sandbox
  ☆20Updated 7 years ago
• benb116 / Gone-Phishing-2
  New and Improved
  ☆16Updated 8 years ago
• blacktop / language-yara
  Yara syntax highlighting
  ☆25Updated 3 years ago
• laincode / latig0sx
  OSX Security Compliance & Hardening
  ☆49Updated 9 years ago
• knightsc / XProtect
  macOS XProtect definition files
  ☆38Updated 2 years ago
• mandiant / macOS-tools
  ☆41Updated 7 years ago
• Cisco-Talos / FIRST-server
  ☆32Updated 5 months ago
• sud0man / pac4mac
  Automatically exported from code.google.com/p/pac4mac
  ☆40Updated 5 years ago
• log2timeline / dfwinreg
  Digital Forensics Windows Registry (dfWinReg)
  ☆49Updated last month
• vivisect / dissect
  vstruct based dissectors for various file/protocol formats
  ☆15Updated 7 years ago
• mbrown1413 / SqliteFind
  A Volatility plugin for finding sqlite database rows
  ☆22Updated 5 years ago
• Yara-Rules / r2yara
  r2yara - Module for Yara using radare2 information
  ☆34Updated last year
• bridgeythegeek / ndispktscan
  NDISPktScan is a plugin for the Volatility Framework. It parses the Ethernet packets stored by ndis.sys in Windows kernel space memory.
  ☆11Updated 9 years ago
• abrignoni / iOS-Mobile-Installation-Logs-Parser
  ☆60Updated 4 years ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆32Updated 8 months ago
• alexander-hanel / ida_yara
  A python script that can be used to scan data within in an IDB using Yara.
  ☆22Updated 6 years ago
• phdphuc / mac-a-mal
  The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
  ☆82Updated 6 years ago
• jjarava / mac-osx-forensics
  Automatically exported from code.google.com/p/mac-osx-forensics
  ☆27Updated 8 years ago
• halpomeranz / mbdbls
  Parse Manifest.mbdb files from iTunes backup directories
  ☆19Updated 7 years ago