Alternatives and similar repositories for MacResponse-Forensics

Users that are interested in MacResponse-Forensics are comparing it to the libraries listed below

• laincode / latig0sx
  OSX Security Compliance & Hardening
  ☆48Updated 10 years ago
• carmaa / interrogate
  Interrogate is a proof-of-concept tool for identification of cryptographic keys in binary material (regardless of target operating system…
  ☆79Updated 6 years ago
• log2timeline / dfwinreg
  Digital Forensics Windows Registry (dfWinReg)
  ☆52Updated 3 weeks ago
• ikoniaris / thug-vagrant
  Vagrant configuration to setup a Thug honeyclient VM
  ☆20Updated 10 years ago
• joswr1ght / nm2lp
  Convert Windows Netmon Monitor Mode Wireless Packet Captures to Libpcap Format
  ☆15Updated 6 years ago
• Rurik / PE_Carver
  Carves EXEs from given data files, using intelligent carving based upon PE headers
  ☆39Updated 8 years ago
• 504ensicsLabs / find_times
  Discover potential timestamps within the Windows Registry
  ☆19Updated 11 years ago
• nccgroup / CECster
  A GUI-based tool to perform security testing against the HDMI CEC (Consumer Electronics Control) and HEC (HDMI Ethernet Channel) protocol…
  ☆31Updated 12 years ago
• buffer / maltracer
  Win32 Python code for tracing malware activities on infected hosts
  ☆26Updated 9 years ago
• mac4n6 / HFSPlus_Resources
  Resources for HFS+ Forensics
  ☆37Updated 9 years ago
• nccgroup / pip3line
  The Swiss army knife of byte manipulation
  ☆43Updated 9 years ago
• sud0man / pac4mac
  Automatically exported from code.google.com/p/pac4mac
  ☆40Updated 6 years ago
• Aki92 / Thug-Distributed
  It is the Distributed Version of Thug, by which all systems across the world running thug will get connect. Then URLs will be distributed…
  ☆24Updated 9 years ago
• davidhowell-tx / PS-DigitalForensics
  PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts
  ☆56Updated 5 years ago
• 9b / pdfxray_lite
  Lite version of PDF X-RAY that uses no backend
  ☆36Updated 13 years ago
• scriptjunkie / Ambush
  Ambush Host Intrusion Prevention System
  ☆65Updated 12 years ago
• ytisf / muninn
  A short and small memory forensics helper.
  ☆52Updated 8 years ago
• w8mej / IRKnowledge
  A curated list of tools for incident response
  ☆32Updated last year
• squiffy / Masochist
  XNU Rootkit Framework
  ☆126Updated 10 years ago
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆51Updated 4 years ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆33Updated last year
• metrodango / pip3line
  Swiss Army knife for raw bytes manipulation & interception
  ☆56Updated 2 years ago
• herrcore / LocalShellExtParse
  Script to parse first load time for Shell Extensions loaded by user. Also enumerates all loaded Shell Extensions that are only installed …
  ☆21Updated 10 years ago
• Cr4sh / secretnet_expl
  LPE exploits for Secret Net and Secret Net Studio
  ☆51Updated 9 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 8 years ago
• MalwareLu / malware-lu
  Automatically exported from code.google.com/p/malware-lu
  ☆56Updated 6 years ago
• legbacore / t2e_integrity_check
  Integrity checking script for Apple Thunderbolt to Ethernet adapters, to check for attacks similar to Thunderstrike 2
  ☆26Updated 10 years ago
• sandialabs / mac-sandbox
  This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)
  ☆23Updated 9 years ago
• blacktop / language-yara
  Yara syntax highlighting
  ☆25Updated 4 years ago
• sensepost / yeti
  SensePost's network footprinting and enumeration tool. You can't pwn what you don't know about.
  ☆43Updated 10 years ago