lyq1996 / X-MonitorLinks
X-Monitor is an open-source, extensible event monitoring tool for macOS that provides security professionals with the ability to perform process behavior auditing.
☆19Updated last year
Alternatives and similar repositories for X-Monitor
Users that are interested in X-Monitor are comparing it to the libraries listed below
Sorting:
- A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).☆50Updated 6 months ago
- MacOS X process monitor using EndpointSecurity extension.☆37Updated 4 months ago
- A simple demonstration of the macOS Network Extension☆16Updated 4 years ago
- Sample code for macOS Extensions Part 3☆24Updated 5 years ago
- Grant private entitlements to OSX apps☆112Updated 5 years ago
- Mach-O file parser.☆60Updated 9 months ago
- Modifications to Apple's dyld project to fix Objective-C information when extracting dyld_shared_cache from macOS Big Sur to help Hopper …☆150Updated 5 years ago
- Guessed headers of non-public Apple SDK☆59Updated this week
- Updated sample code for OS X and iOS Kernel Programming book☆38Updated 7 years ago
- slightly modified version of jonathan levins lsdtrip bin available at http://newosxbook.com/tools/lsdtrip.html☆19Updated last year
- Yet another xpc sniffer☆132Updated 6 months ago
- A macOS application for browsing the IOKit registry.☆195Updated 2 years ago
- Decompiling macOS Hypervisor.framework by hand☆78Updated last month
- A file system filter for Mac OS X☆103Updated 8 years ago
- A runtime ObjC class-dump☆78Updated last year
- An Apple Silicon hooking library written in C☆13Updated 4 years ago
- Transform any ARM macho executable to a dynamic library☆44Updated 10 months ago
- A modern Objective-C class dump based on LIEF and LLVM.☆169Updated last year
- Hooking mach-o libraries in current or remote processes by patching __GOT and NLIST☆18Updated 6 years ago
- A tiny macOS 10.12 Sierra kernel extension for disabling CS_REQUIRE_LV system-wide☆72Updated 8 years ago
- A macOS command-line tool to dump the contents of dyld shared cache files.☆44Updated 9 months ago
- Proof-of-concept LLVM fork to speculatively inline objc_msgSend☆16Updated 3 years ago
- Work with macOS VMs using Virtualization☆291Updated last year
- This project injects into Hopper Disassembler and exposes core functionality via a local server. It can be used to create automations/too…☆16Updated 4 years ago
- mirror of apple's corecrypto implementation☆36Updated 9 years ago
- Scripts + patches to pwn vma2 (Virtualization.framework) macOS virtual machines☆62Updated last year
- Tool for reverse-engineering Apple's sandbox☆60Updated 8 years ago
- A kext to facilitate calling PE_enter_debugger on machines that don't respect Cmd-Ctrl-Opt-Shift-Esc☆15Updated 7 years ago
- XPC and Friends (libxpc, launchd and soon xpc.framework)☆69Updated last year
- Kdebug events and ktraces parser☆38Updated 9 months ago