Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68REHCM
☆50Sep 23, 2016Updated 9 years ago
Alternatives and similar repositories for osx_incident_response_scripting_and_analysis
Users that are interested in osx_incident_response_scripting_and_analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆67Jul 1, 2020Updated 5 years ago
- Synapse Rapid Power-up for SinkDB☆11Jun 24, 2025Updated 10 months ago
- Home to the ActorTrackr source code☆24Jun 21, 2017Updated 8 years ago
- A Python, Boto3 script that leverages a forensic volume to attach & mount to a selected instance, run a memory dump, unmount and detach f…☆12Jul 15, 2020Updated 5 years ago
- ☆18Sep 13, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Fetch all Honeypot☆12Oct 3, 2018Updated 7 years ago
- Eddie Vetter - triage macOS applications for security research☆16May 24, 2021Updated 4 years ago
- Incident Response and Forensic on AWS☆20May 19, 2020Updated 5 years ago
- A Jamf Pro webhook simulator☆14Jul 3, 2017Updated 8 years ago
- rename☆19Jul 19, 2017Updated 8 years ago
- Helpful utility scripts for managing Mac OS clients with JAMF Casper JSS☆11May 12, 2016Updated 9 years ago
- Presentation Archives for my macOS and iOS Related Research☆263Mar 18, 2025Updated last year
- Mac App Update Management, via JAMFJSS☆14Feb 12, 2018Updated 8 years ago
- ☆13Feb 17, 2016Updated 10 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Auxiliary scripts for Incident Response with ELK☆11Oct 7, 2015Updated 10 years ago
- A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…☆82Nov 29, 2015Updated 10 years ago
- Collection of forensics artifacts location for Mac OS X and iOS☆345Nov 11, 2021Updated 4 years ago
- force reinstall and remediation of broken Crowdstrike Falcon agents on macOS☆14Jun 17, 2022Updated 3 years ago
- DeepToad is a library and a tool to clusterize similar files using fuzzy hashing☆20Apr 5, 2020Updated 6 years ago
- Shareable Scripts for use in a Mac Support Environment☆14Oct 18, 2019Updated 6 years ago
- Grab a Twitter user timeline for further processing (storing to Elasticsearch, highligthing, etc)☆41Aug 28, 2015Updated 10 years ago
- An external patch definition server for Jamf Pro☆76Oct 14, 2021Updated 4 years ago
- A Mac command-line tool that automatically downloads your Jamf assets.☆24Dec 5, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of Slides From My Conference Talks☆21Nov 21, 2022Updated 3 years ago
- Viewstate Hidden Control Enumerator☆17Sep 12, 2013Updated 12 years ago
- The Event Maturity Matrix (EMM) is a comprehensive framework that provides clarity regarding the capabilities and nuances of SaaS audit l…☆30Apr 16, 2026Updated 3 weeks ago
- A simple self-hosted RSS reader with AI article summarization feature. 🧶☕️📜☆10Apr 18, 2026Updated 3 weeks ago
- InvestigationPlaybookSpec☆71Sep 26, 2017Updated 8 years ago
- Github action to create, update and delete scripts in jamf☆24Sep 12, 2025Updated 7 months ago
- The project was moved here https://github.com/atomic-threat-coverage/atomic-threat-coverage☆25Aug 12, 2019Updated 6 years ago
- Examples of DDM on macOS for use with kmfddm☆18Jul 5, 2024Updated last year
- ☆23Apr 30, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some simple and useful tools☆15May 8, 2018Updated 8 years ago
- Mac scripts unrelated to a specific MDM☆22Feb 4, 2025Updated last year
- A framework for orchestrating forensic collection, processing and data export☆347Updated this week
- dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software☆55Nov 14, 2019Updated 6 years ago
- This directory contains random scripts from threat hunting or malware research☆11Feb 15, 2018Updated 8 years ago
- Repository containing Jupyter Notebooks for working with OSQuery tables and data☆17May 8, 2020Updated 6 years ago
- Bringing DevOps to Forensics☆34Feb 4, 2015Updated 11 years ago