A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware guidance for disk artifacts, live state, required privilege, triggers, and review pivots.
☆25Apr 26, 2026Updated 4 months ago
Alternatives and similar repositories for macOS-persistence-cheatsheet
Users that are interested in macOS-persistence-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 3 months ago
- ☆22Jul 31, 2026Updated last month
- ☆30Feb 12, 2026Updated 7 months ago
- List of resources for macOS Client Platform Engineering.☆12Apr 17, 2025Updated last year
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 9 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A comprehensive set of tools, scripts, and resources designed for MacAdmins to efficiently manage and deploy browsers on macOS.☆22Updated this week
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- BrowserConfigEditor is a macOS application that simplifies the creation and editing of browser policy configurations (MDM/management plis…☆34Jan 25, 2026Updated 7 months ago
- Security Compliance Project for Linux☆21Updated this week
- Track Apple software update changes with Github Actions☆28Feb 11, 2022Updated 4 years ago
- ☆19Oct 2, 2024Updated last year
- The repository will contain small but really helpful resources for macOS penetration testing.☆16Sep 23, 2024Updated last year
- All the pieces needed to create a Jamf Pre Stage Package and Enrolment script displaying progress with swiftDialog☆41Apr 19, 2023Updated 3 years ago
- A Binary Ninja plugin for analyzing Swift binaries☆28Oct 20, 2025Updated 10 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- An AppleScript snippet that will launch System Preferences and click the "More Info" button☆28Apr 7, 2025Updated last year
- AutoPkg Wizard - a macOS SwiftUI app for managing AutoPkg☆40Jun 25, 2026Updated 2 months ago
- JXA implementation of some SwiftBelt functions. Author: Cedric Owens☆47Jun 22, 2023Updated 3 years ago
- Tool to gather quick amounts of information from MacOS and iOS sysdiagnoses☆25Aug 28, 2026Updated 2 weeks ago
- A malware scanner with Yara and ClamAV binding☆12May 23, 2026Updated 3 months ago
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 3 years ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- This tool is meant to parse an NTFS $MFT file.☆15Mar 26, 2024Updated 2 years ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A MDM Agnostic Self Service Agent for macOS☆24Dec 7, 2024Updated last year
- App to redeploy the Jamf Framework to a device enrolled in Jamf Pro☆68Aug 16, 2024Updated 2 years ago
- A local-first web interface for managing Tart VMs on Apple Silicon macOS.☆20Mar 15, 2026Updated 5 months ago
- #Entra #JamfPro☆10Apr 9, 2024Updated 2 years ago
- Tool for putting a Apple Silicon Mac into DFU mode☆64Jul 8, 2023Updated 3 years ago
- MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their ori…☆13May 10, 2023Updated 3 years ago
- Air Drop Assistant (ADA) gives you more control over airdrop's settings.☆56May 5, 2026Updated 4 months ago
- NSKeyedArchive plist deserializer☆29Sep 13, 2024Updated 2 years ago
- Swift CLI for Apple School & Business Manager APIs — get devices info and assign/unassign Device Management Services in bulk.☆140Sep 2, 2026Updated last week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A MacAdmin-focused QuickLook plugin with GitOps in mind☆192Jun 21, 2026Updated 2 months ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Orchestration Software for Incident Response☆16Sep 3, 2026Updated last week
- Terraform Provider for the Apple Business/School Manager API☆26Updated this week
- Contour — device management configuration toolkit☆86Sep 3, 2026Updated last week
- ☆10Dec 18, 2023Updated 2 years ago
- Scripts to use with the awesome swiftDialog app https://github.com/swiftdialog/swiftdialog☆47Nov 14, 2025Updated 9 months ago