Alternatives and similar repositories for FSEventsParser:

Users that are interested in FSEventsParser are comparing it to the libraries listed below

• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 4 years ago
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆31Updated last year
• ydkhatri / spotlight_queries
  Queries for parsed spotlight database in sqlite
  ☆12Updated 4 years ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆28Updated 2 years ago
• WithSecureLabs / macOSTriageCollectionScript
  A triage data collection script for macOS
  ☆27Updated 4 years ago
• mnrkbys / macosac
  Forensic Artifact Collection Tool for macOS
  ☆105Updated 5 months ago
• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated 8 months ago
• OTRF / 2021-OceanLotus-workshop
  ☆18Updated 3 years ago
• strozfriedberg / plistutils
  Python utilities related to plists
  ☆54Updated last year
• cclgroupltd / chrome-profile-view
  Python web app for previewing data in a Chrome Profile Folder
  ☆18Updated 7 months ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆15Updated 11 months ago
• cclgroupltd / ccl-segb
  Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.
  ☆18Updated 8 months ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆66Updated 3 years ago
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆17Updated 3 years ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆36Updated last year
• 00010111 / gMetaDataParse
  ☆20Updated last year
• FullTang / AndroidPWList
  A password list optimized for use on Android devices.
  ☆11Updated 2 years ago
• AXYS-Cyber / iCatch
  A utility to process the iOS Cache.sqlite database and create a timelined KML map for use in Google Earth
  ☆26Updated 2 months ago
• Recruit-CSIRT / macApfsMounter
  A small tool to easily mount APFS image on macOS for forensics.
  ☆14Updated 4 years ago
• nrvana / macOS-triage
  macOS triage is a python script to collect various macOS logs, artifacts, and other data.
  ☆26Updated 3 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• ydkhatri / Presentations
  Slides and material from my conference presentations
  ☆15Updated 10 months ago
• EricZimmerman / TLEFilePlugins
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆22Updated last month
• forensicmatt / PancakeViewer
  A DFVFS Backed Forensic Viewer
  ☆40Updated 4 years ago
• moaistory / IE10Analyzer
  http://moaistory.blogspot.com/2016/08/ie10analyzer.html
  ☆16Updated 7 months ago
• abrignoni / DFIRlogbook
  Logbook for Digital Forensics and Incident Response
  ☆10Updated 3 years ago
• LincolnLandForensics / HodgePodge
  /ˈhäjˌpäj/ "a confused mixture."
  ☆11Updated last week
• SentineLabs / XProtect-Malware-Families
  Mapping XProtect's obfuscated malware family names to common industry names.
  ☆84Updated 9 months ago
• dwmetz / Axiom-PowerShell
  PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
  ☆10Updated 5 months ago