Alternatives and similar repositories for ccl-asl:

Users that are interested in ccl-asl are comparing it to the libraries listed below

• knightsc / XProtect
  macOS XProtect definition files
  ☆40Updated 2 years ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆28Updated 2 years ago
• sandialabs / mac-sandbox
  This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)
  ☆21Updated 8 years ago
• ainfosec / MacResponse-Forensics
  ☆33Updated 12 years ago
• xorrior / goesf
  Golang command line tool for the macOS Endpoint Security Framework
  ☆29Updated 5 years ago
• gamelinux / activedns
  An active domain name query tool to help keep track of domain name movements...
  ☆15Updated 3 years ago
• abrignoni / iOS-KnowledgeC-StructuredMetadata-Bplists
  Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.
  ☆22Updated 5 years ago
• gdbinit / readphysmem
  A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.
  ☆25Updated 9 years ago
• elicn / xstrings
  Print the strings of encoded printable characters in files
  ☆12Updated 9 years ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆36Updated last year
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆50Updated 3 years ago
• benb116 / Gone-Phishing-2
  New and Improved
  ☆17Updated 8 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 7 years ago
• laincode / latig0sx
  OSX Security Compliance & Hardening
  ☆49Updated 9 years ago
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆38Updated 3 years ago
• davehull / Mal-Seine
  Why hunt when you can seine?
  ☆21Updated 9 years ago
• mac4n6 / HFSPlus_Resources
  Resources for HFS+ Forensics
  ☆35Updated 9 years ago
• bsi-group / autorun-logger-server
  Server for receiving autorun data from the clients
  ☆13Updated 7 years ago
• Rurik / FileInfo
  Basic file metadata gathering script
  ☆21Updated 3 years ago
• CylanceVulnResearch / osx_runbin
  ☆66Updated 2 years ago
• cedowens / Persistent-Swift
  A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…
  ☆31Updated 3 years ago
• mosesschwartz / extract_iocs
  Extracts indicators of compromise (IOCs), including domain names, IPv4 addresses, email addresses, and hashes, from text.
  ☆13Updated 7 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆22Updated 6 years ago
• ydkhatri / APFS_010
  010 template for apfs
  ☆24Updated 3 years ago
• 0utrider / malrecon
  MalRecon - Basic Malware Reconnaissance and Analysis Tool
  ☆26Updated 7 years ago
• MAECProject / pefile-to-maec
  Generate MAEC XML from Ero Carrera's pefile output
  ☆15Updated 7 years ago
• cedowens / JXA-RemoveQuarantine
  JXA script based on research by Jeff Johnson on leveraging TextEdit to remove quarantine attributes on files. Jeff's original research is…
  ☆17Updated 4 years ago
• nccgroup / yaml2yara
  Generate bulk YARA rules from YAML input
  ☆22Updated 5 years ago
• jbradley89 / osx_incident_response_scripting_and_analysis
  Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…
  ☆49Updated 8 years ago
• antman1p / PrintTCCdb
  JXA script for Mythic that prints the TCC.db
  ☆15Updated 3 years ago