Alternatives and similar repositories for MacResponse-Forensics

Users that are interested in MacResponse-Forensics are comparing it to the libraries listed below

• laincode / latig0sx
  OSX Security Compliance & Hardening
  ☆48Updated 9 years ago
• gdbinit / readphysmem
  A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.
  ☆25Updated 9 years ago
• mandiant / macOS-tools
  ☆43Updated 8 years ago
• knightsc / XProtect
  macOS XProtect definition files
  ☆40Updated 3 years ago
• gdbinit / mpress_dumper
  MPRESS dumper for OS X
  ☆66Updated 10 years ago
• mac4n6 / HFSPlus_Resources
  Resources for HFS+ Forensics
  ☆37Updated 9 years ago
• sandialabs / mac-sandbox
  This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)
  ☆23Updated 8 years ago
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆50Updated 3 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆22Updated 6 years ago
• jndok / ropnroll
  An OSX exploitation helper library.
  ☆35Updated 9 years ago
• williballenthin / LfLe
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆27Updated 9 years ago
• garrett-davidson / iOS-Backup-Forensics-Toolkit
  Decrypts local iOS backups and recreates file system, with a framework for automatically extracting useful information
  ☆43Updated 9 years ago
• sud0man / pac4mac
  Automatically exported from code.google.com/p/pac4mac
  ☆40Updated 6 years ago
• trailofbits / ios-integrity-validator
  Integrity validator for iOS devices
  ☆102Updated 6 years ago
• cclgroupltd / ccl-asl
  Python Module for parsing Apple ASL Logs
  ☆15Updated 9 years ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆33Updated last year
• tienex / apfs
  Mount, dump and analyze APFS volumes and containers
  ☆41Updated 7 years ago
• rickmark / mojo_thor
  Research about malware that infects the EFI and SMC of Apple MacBooks.
  ☆60Updated 2 months ago
• 9b / pdfxray_lite
  Lite version of PDF X-RAY that uses no backend
  ☆36Updated 13 years ago
• joswr1ght / nm2lp
  Convert Windows Netmon Monitor Mode Wireless Packet Captures to Libpcap Format
  ☆15Updated 5 years ago
• gdbinit / diagnostic_service
  OS X rootkit loader version #1
  ☆18Updated 10 years ago
• w8mej / PoorOperationalSecurityPractices
  Deceptive tradecraft should be fun and light, not stern and stressful. It is cool to be cute.
  ☆13Updated last year
• vivami / grey_fox
  The grey fox
  ☆25Updated 9 years ago
• iSECPartners / dnsRedir
  ☆39Updated 9 years ago
• blacktop / language-yara
  Yara syntax highlighting
  ☆25Updated 3 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 5 years ago
• log2timeline / dfdatetime
  Digital Forensics date and time
  ☆24Updated 6 months ago
• libyal / libhibr
  Library and tools to access the Windows Hibernation File (hiberfil.sys) format
  ☆13Updated 11 months ago
• obsidianforensics / SQUID
  "Fuzzy matching" for SQLite databases
  ☆30Updated 4 years ago
• trailofbits / trailofphish
  Phishing e-mail repository
  ☆37Updated 5 years ago