Alternatives and similar repositories for ccl-asl

Users that are interested in ccl-asl are comparing it to the libraries listed below

• xorrior / goesf
  Golang command line tool for the macOS Endpoint Security Framework
  ☆29Updated 5 years ago
• knightsc / XProtect
  macOS XProtect definition files
  ☆40Updated 3 years ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆29Updated 2 years ago
• sandialabs / mac-sandbox
  This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)
  ☆23Updated 8 years ago
• jjarava / mac-osx-forensics
  Automatically exported from code.google.com/p/mac-osx-forensics
  ☆28Updated 9 years ago
• gdbinit / readphysmem
  A small utility to read and write to Macs physical memory using default AppleHWAccess.kext.
  ☆25Updated 9 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 5 years ago
• melomac / XPlist
  XProtect configuration files stats
  ☆20Updated 7 years ago
• mac4n6 / macMRU-Parser
  Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.
  ☆104Updated 7 years ago
• tribalchicken / volatility-filevault2
  Volatility plugin to extract FileVault 2 VMK's
  ☆50Updated 3 years ago
• mac4n6 / HFSPlus_Resources
  Resources for HFS+ Forensics
  ☆37Updated 9 years ago
• williballenthin / LfLe
  Recover event log entries from an image by heurisitically looking for record structures.
  ☆27Updated 9 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 7 years ago
• knightsc / EndpointSecurity
  A module to expose the Endpoint Security library to Swift
  ☆20Updated 5 years ago
• pstirparo / machofile
  machofile is a module to parse Mach-O binary files
  ☆51Updated last year
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆39Updated 3 years ago
• jbradley89 / osx_incident_response_scripting_and_analysis
  Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…
  ☆49Updated 8 years ago
• theevilbit / macos
  ☆31Updated 11 months ago
• log2timeline / l2tbinaries
  Binaries for the log2timeline projects and dependencies
  ☆39Updated 8 months ago
• mdegrazia / Google-Analytic-Cookie-Cruncher
  Parse IE, FireFox, Chrome and Safari Cookies for Google Analytic values
  ☆23Updated 8 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆22Updated 6 years ago
• mnemonic-no / dnscache
  Volatility memory forensics plugin for extracting Windows DNS Cache
  ☆29Updated 8 years ago
• mattboyer / sqbrite
  SQBrite is a data recovery tool for SQLite databases
  ☆43Updated 3 years ago
• hatching / tracy
  tracy - a system call tracer and injector. Find us in #tracy on irc.freenode.net
  ☆33Updated last year
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆35Updated 2 years ago
• CylanceVulnResearch / osx_runbin
  ☆66Updated 2 years ago
• ydkhatri / Presentations
  Slides and material from my conference presentations
  ☆16Updated last year
• vivami / grey_fox
  The grey fox
  ☆25Updated 8 years ago
• itsreallynick / office-crackros
  Crack your macros like the math pros.
  ☆33Updated 8 years ago
• trailofbits / ios-integrity-validator
  Integrity validator for iOS devices
  ☆102Updated 6 years ago