A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware guidance for disk artifacts, live state, required privilege, triggers, and review pivots.
☆23Apr 26, 2026Updated 3 months ago
Alternatives and similar repositories for macOS-persistence-cheatsheet
Users that are interested in macOS-persistence-cheatsheet are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- An implementation of EndpointSecurity on the 5BSD kernel.☆17May 31, 2026Updated 2 months ago
- ☆22Updated this week
- ☆30Feb 12, 2026Updated 5 months ago
- List of resources for macOS Client Platform Engineering.☆12Apr 17, 2025Updated last year
- Outil de triage automatisé de différents types de collectes d'artefacts.☆18Dec 8, 2025Updated 7 months ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- A comprehensive set of tools, scripts, and resources designed for MacAdmins to efficiently manage and deploy browsers on macOS.☆21Updated this week
- Parser for Sdba memory pool tags☆21Jul 16, 2021Updated 5 years ago
- BrowserConfigEditor is a macOS application that simplifies the creation and editing of browser policy configurations (MDM/management plis…☆34Jan 25, 2026Updated 6 months ago
- Track Apple software update changes with Github Actions☆27Feb 11, 2022Updated 4 years ago
- ☆19Oct 2, 2024Updated last year
- The repository will contain small but really helpful resources for macOS penetration testing.☆16Sep 23, 2024Updated last year
- All the pieces needed to create a Jamf Pre Stage Package and Enrolment script displaying progress with swiftDialog☆41Apr 19, 2023Updated 3 years ago
- A Binary Ninja plugin for analyzing Swift binaries☆27Oct 20, 2025Updated 9 months ago
- An AppleScript snippet that will launch System Preferences and click the "More Info" button☆28Apr 7, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- AutoPkg Wizard - a macOS SwiftUI app for managing AutoPkg☆39Jun 25, 2026Updated last month
- JXA implementation of some SwiftBelt functions. Author: Cedric Owens☆46Jun 22, 2023Updated 3 years ago
- Tool to gather quick amounts of information from MacOS and iOS sysdiagnoses☆25Jul 27, 2026Updated last week
- A lightweight, native macOS RSS Reader application built with Swift.☆16May 25, 2026Updated 2 months ago
- A malware scanner with Yara and ClamAV binding☆12May 23, 2026Updated 2 months ago
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 2 years ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- A MDM Agnostic Self Service Agent for macOS☆24Dec 7, 2024Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- App to redeploy the Jamf Framework to a device enrolled in Jamf Pro☆69Aug 16, 2024Updated last year
- A diagnostic performance logging utility for macOS: logs CPU, memory, GPU, network, and battery from the menu bar to help detect and diag…☆67Updated this week
- A local-first web interface for managing Tart VMs on Apple Silicon macOS.☆20Mar 15, 2026Updated 4 months ago
- #Entra #JamfPro☆10Apr 9, 2024Updated 2 years ago
- Tool for putting a Apple Silicon Mac into DFU mode☆61Jul 8, 2023Updated 3 years ago
- MFT and USN parser that allows direct extraction in filesystem timeline format (mactime), dump all resident files in the MFT in their ori…☆13May 10, 2023Updated 3 years ago
- Air Drop Assistant (ADA) gives you more control over airdrop's settings.☆55May 5, 2026Updated 2 months ago
- Swift CLI for Apple School & Business Manager APIs — get devices info and assign/unassign Device Management Services in bulk.☆139Jul 14, 2026Updated 2 weeks ago
- NSKeyedArchive plist deserializer☆29Sep 13, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A MacAdmin-focused QuickLook plugin with GitOps in mind☆178Jun 21, 2026Updated last month
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆22Jan 22, 2021Updated 5 years ago
- Terraform Provider for the Apple Business/School Manager API☆25Updated this week
- Contour — device management configuration toolkit☆63Jun 24, 2026Updated last month
- Orchestration Software for Incident Response☆16Updated this week
- ☆10Dec 18, 2023Updated 2 years ago
- Scripts to use with the awesome swiftDialog app https://github.com/swiftdialog/swiftdialog☆47Nov 14, 2025Updated 8 months ago