Alternatives and similar repositories for X-Monitor

Users that are interested in X-Monitor are comparing it to the libraries listed below

• ConradSun / NuwaStone
  A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).
  ☆48Updated 3 months ago
• gyunaev / macprocmon
  MacOS X process monitor using EndpointSecurity extension.
  ☆37Updated last month
• knightsc / osx_and_ios_kernel_programming
  Updated sample code for OS X and iOS Kernel Programming book
  ☆38Updated 6 years ago
• willyu-elastic / SimpleEndpoint
  Sample code for macOS Extensions Part 3
  ☆24Updated 5 years ago
• slavaim / MacOSX-FileSystem-Filter
  A file system filter for Mac OS X
  ☆101Updated 8 years ago
• Torrekie / apple_internal_sdk
  Guessed headers of non-public Apple SDK
  ☆48Updated 3 months ago
• lechium / lsdtrip
  slightly modified version of jonathan levins lsdtrip bin available at http://newosxbook.com/tools/lsdtrip.html
  ☆19Updated last year
• Trinity2019 / SimplePcap
  A simple demonstration of the macOS Network Extension
  ☆16Updated 4 years ago
• osy / AMFIExemption
  Grant private entitlements to OSX apps
  ☆109Updated 5 years ago
• slavaim / MacOSX-VFS-redirector
  Mac OS X file system filter to redirect file operations
  ☆42Updated 7 years ago
• matan1008 / pykdebugparser
  Kdebug events and ktraces parser
  ☆37Updated 6 months ago
• slavaim / MacOSX-IOKit-Hooker
  A macOS IOKit objects hooker
  ☆88Updated 8 years ago
• macmade / macho
  Mach-O file parser.
  ☆57Updated 6 months ago
• macmade / IOBrowser
  A macOS application for browsing the IOKit registry.
  ☆191Updated 2 years ago
• saagarjha / macOSSandboxInitializationBypass
  App sandbox escapes for macOS
  ☆30Updated 5 years ago
• samdmarshall / apple-corecrypto
  mirror of apple's corecrypto implementation
  ☆36Updated 8 years ago
• steven-michaud / SandboxMirror
  Tool for reverse-engineering Apple's sandbox
  ☆60Updated 8 years ago
• userlandkernel / mach-hook
  Hooking mach-o libraries in current or remote processes by patching __GOT and NLIST
  ☆18Updated 5 years ago
• ChiChou / XpcScope
  Yet another xpc sniffer
  ☆132Updated 2 months ago
• jevinskie / dylibify
  Transform any ARM macho executable to a dynamic library
  ☆42Updated 7 months ago
• knightsc / EnterDebugger
  A kext to facilitate calling PE_enter_debugger on machines that don't respect Cmd-Ctrl-Opt-Shift-Esc
  ☆15Updated 7 years ago
• ddeville / xnu-make
  Easily build, install and deploy the XNU kernel
  ☆62Updated 9 years ago
• slavaim / MacOSX-Network-Sockets-Filter
  A MacOS network kernel extension filter for IPv4/IPv6 sockets.
  ☆75Updated 8 years ago
• securing / SimpleXPCApp
  Secure example of an XPC helper written in Swift
  ☆109Updated 5 years ago
• nick-botticelli / vma2pwn
  Scripts + patches to pwn vma2 (Virtualization.framework) macOS virtual machines
  ☆59Updated last year
• google / macops-MOLXPCConnection
  An NSXPCConnection wrapper that does signature validation
  ☆26Updated last year
• AloneMonkey / MacKext
  Learn MacOS kernel extensions
  ☆46Updated 7 years ago
• SentineLabs / aevt_decompile
  This is a work-in-progress command line tool for reversing run-only AppleScripts. It will help parse the output of applescript-disassembl…
  ☆69Updated 4 years ago
• PsychoBird / Capere
  An Apple Silicon hooking library written in C
  ☆14Updated 4 years ago
• zhuowei / HvDecompile
  Decompiling macOS Hypervisor.framework by hand
  ☆129Updated 3 years ago