jjarava / mac-osx-forensics
Automatically exported from code.google.com/p/mac-osx-forensics
☆28Updated 9 years ago
Alternatives and similar repositories for mac-osx-forensics:
Users that are interested in mac-osx-forensics are comparing it to the libraries listed below
- Forensic Artifact Collection Tool for macOS☆110Updated 6 months ago
- Binaries for the log2timeline projects and dependencies☆39Updated 6 months ago
- machofile is a module to parse Mach-O binary files☆48Updated last year
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆15Updated last year
- Volatility plugin to extract FileVault 2 VMK's☆50Updated 3 years ago
- ☆19Updated 5 years ago
- A parser for Unified logging tracev3 files☆85Updated last year
- incident response tool for iOS devices☆49Updated 2 years ago
- Different DFIR and CTI utilities☆36Updated 4 years ago
- A rewrite of mactime, a bodyfile reader☆37Updated 7 months ago
- Script that checks for available updates for the most commonly used Digital Forensics tools☆59Updated 4 years ago
- A DFVFS Backed Forensic Viewer☆40Updated 4 years ago
- Slides and material from my conference presentations☆15Updated 11 months ago
- isodump - ISO dump utility☆40Updated 5 years ago
- Automatically exported from code.google.com/p/pac4mac☆40Updated 6 years ago
- ☆65Updated last month
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆92Updated last year
- macOS triage is a python script to collect various macOS logs, artifacts, and other data.☆26Updated 4 years ago
- Python library for parsing AccessData AD1 images☆31Updated last year
- Norimaci is a simple and lightweight malware analysis sandbox for macOS☆69Updated 5 years ago
- macOS XProtect definition files☆40Updated 3 years ago
- A small tool to easily mount APFS image on macOS for forensics.☆15Updated 4 years ago
- Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…☆49Updated 8 years ago
- macOS Artifact Intelligence Tool☆13Updated 5 years ago
- Parses the WMI object database....looking for persistence☆31Updated 5 years ago
- Tools for macOS Forensic Bootable media☆15Updated 4 years ago
- Yet another registry parser☆131Updated 2 years ago
- PowerShell scripts for Hard Drive forensics and parsing Windows Artifacts☆56Updated 4 years ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆30Updated last year
- unXOR will search a XORed file and try to guess the key using known-plaintext attacks.☆142Updated 4 years ago