Alternatives and similar repositories for aftermath:

Users that are interested in aftermath are comparing it to the libraries listed below

• jamf / jamfprotect
  A repository for open-source resources created for use with or alongside Jamf Protect.
  ☆189Updated 2 months ago
• infosecB / LOOBins
  Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…
  ☆451Updated last month
• mandiant / macos-UnifiedLogs
  ☆223Updated this week
• CrowdStrike / automactc
  AutoMacTC: Automated Mac Forensic Triage Collector
  ☆537Updated 2 years ago
• northpolesec / santa
  A binary authorization and monitoring system for macOS
  ☆93Updated this week
• WithSecureLabs / Jamf-Attack-Toolkit
  Suite of tools to facilitate attacks against the Jamf macOS management platform.
  ☆179Updated 3 years ago
• mvdbent / CIS-macOS-Security
  ☆67Updated 3 years ago
• macadmins / osquery-extension
  An osquery extension for endpoint engineers
  ☆104Updated last month
• thomasareed / pict
  Post-Infection Collection Toolkit
  ☆93Updated last year
• joshua-d-miller / macOSLAPS
  Swift binary that will change a local administrator password to a random generated password. Similar behavior to LAPS for Windows
  ☆394Updated 8 months ago
• sametsazak / mergen
  Mergen is an open-source, native macOS application for auditing and checking the security of your MacOS.
  ☆157Updated last year
• mvdbent / CIS-Script
  ☆101Updated 2 years ago
• chainguard-dev / osquery-defense-kit
  Production-ready detection & response queries for osquery
  ☆535Updated this week
• CrowdStrike / zscaler-FalconX-integration
  This is the integration to feed Falcon X IOC data into zscaler's platform
  ☆14Updated 6 months ago
• themittenmac / TrueTree
  A command line tool for pstree-like output on macOS with additional pid capturing capabilities
  ☆247Updated 4 months ago
• jamf / CIS-for-macOS-Catalina-CP
  CIS Benchmarks for macOS Catalina
  ☆123Updated 4 months ago
• SentineLabs / XProtect-Malware-Families
  Mapping XProtect's obfuscated malware family names to common industry names.
  ☆83Updated 8 months ago
• sublime-security / sublime-rules
  Sublime rules for email attack detection, prevention, and threat hunting.
  ☆267Updated this week
• CrowdStrike / Falcon-Toolkit
  Unleash the power of the Falcon Platform at the CLI
  ☆113Updated last week
• macadmins / escrow-buddy
  A macOS authorization plugin that helps MDM administrators ensure valid FileVault keys are escrowed for all their Macs.
  ☆217Updated 4 months ago
• magicsword-io / LOLRMM
  LotL RMM
  ☆111Updated 2 months ago
• CrowdStrike / falconpy
  The CrowdStrike Falcon SDK for Python
  ☆383Updated last week
• macadmins / sofa
  SOFA | A MacAdmin's Simple Organized Feed for Apple Software Updates
  ☆201Updated this week
• elastic / dorothy
  Dorothy is a tool to test security monitoring and detection for Okta environments
  ☆178Updated 5 months ago
• SentineLabs / macos-ttps-yara
  A ruleset to find potentially malicious code in macOS malware samples
  ☆39Updated last year
• kandji-inc / support
  Software provided by the Solutions Engineering and Support teams at Kandji, Inc.
  ☆167Updated 3 weeks ago
• SecondSonConsulting / Baseline
  An MDM agnostic zero touch solution for macOS
  ☆216Updated this week
• singe / tidcli
  A simple touchID prompt'er for use in shell scripts.
  ☆94Updated 7 months ago
• jamf / MakeMeAnAdmin
  Provides temporary admin access for a standard user via Jamf Self Service
  ☆264Updated 11 months ago
• airbnb / rudolph
  A serverless sync server for Santa, built on AWS
  ☆90Updated 2 months ago