jamf / aftermathLinks
Aftermath is a free macOS IR framework
☆560Updated 2 months ago
Alternatives and similar repositories for aftermath
Users that are interested in aftermath are comparing it to the libraries listed below
Sorting:
- A cross platform parser for Apple UnifiedLogs!☆299Updated last month
- A binary and file access authorization system for macOS.☆458Updated last week
- Aftermath is a free macOS incident response framework☆34Updated 2 months ago
- A repository for open-source resources created for use with or alongside Jamf Protect.☆212Updated 5 months ago
- Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in "living off the land" ma…☆509Updated last week
- Pokes users about outstanding security risks found by Crowdstrike Spotlight or vmware Workspace ONE so they secure their own endpoint.☆29Updated 3 weeks ago
- AutoMacTC: Automated Mac Forensic Triage Collector☆554Updated 3 years ago
- The CrowdStrike Falcon SDK for Python☆450Updated this week
- Production-ready detection & response queries for osquery☆596Updated 3 months ago
- Post-Infection Collection Toolkit☆95Updated 2 years ago
- Unleash the power of the Falcon Platform at the CLI☆133Updated 2 months ago
- An osquery extension for endpoint engineers☆115Updated last month
- A command line tool for pstree-like output on macOS with additional pid capturing capabilities☆267Updated last year
- Swift binary that will change a local administrator password to a random generated password. Similar behavior to LAPS for Windows☆420Updated 9 months ago
- Mapping XProtect's obfuscated malware family names to common industry names.☆89Updated 3 weeks ago
- ☆70Updated 4 years ago
- Suite of tools to facilitate attacks against the Jamf macOS management platform.☆188Updated 4 years ago
- A serverless sync server for Santa, built on AWS☆103Updated 5 months ago
- "The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.☆1,214Updated 2 weeks ago
- Automatic security lookups from your clipboard☆24Updated last year
- ☆189Updated 2 weeks ago
- Scripts to streamline the deployment and use of the CrowdStrike Falcon sensor☆198Updated this week
- CIS Benchmarks for macOS Catalina☆121Updated last year
- Falcon Data Replicator☆37Updated last month
- Sublime rules for email attack detection, prevention, and threat hunting.☆336Updated this week
- LotL RMM☆262Updated last week
- This contains all the CrowdStrike API work I've done☆21Updated 6 years ago
- ☆14Updated 2 years ago
- A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing. Gain visibility and contr…☆239Updated 3 weeks ago
- Software provided by the Solutions Engineering and Support teams at Kandji, Inc.☆228Updated last month