mac4n6 / FSEventsParser

Related projects ⓘ

Alternatives and complementary repositories for FSEventsParser

• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated 5 months ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆26Updated last year
• BlackSquirrelz / nidaba
  Some thingy that copies macOS specific forensic artifacts to the location where the script is run from and also generates some folders. B…
  ☆14Updated last week
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆31Updated last year
• ydkhatri / spotlight_queries
  Queries for parsed spotlight database in sqlite
  ☆11Updated 3 years ago
• stark4n6 / ZipWalker
  A simple easy script to read the contents of a zip folder and extract metadata
  ☆10Updated 3 weeks ago
• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 3 years ago
• mnrkbys / macosac
  Forensic Artifact Collection Tool for macOS
  ☆98Updated 2 months ago
• 00010111 / gMetaDataParse
  ☆19Updated last year
• stuxnet999 / FileSigExtractor
  FileSigExtractor is a python based tool which extracts the file signatures of all files within a directory and writes the output to a CSV…
  ☆11Updated last year
• stark4n6 / SQLiteWalker
  Python script to walk a folder or a zip file for SQLite Databases
  ☆35Updated last year
• cclgroupltd / ccl-segb
  Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.
  ☆14Updated 5 months ago
• WithSecureLabs / macOSTriageCollectionScript
  A triage data collection script for macOS
  ☆26Updated 3 years ago
• puffyCid / macos-fseventsd
  A library to parse macOS FsEvents
  ☆18Updated 2 years ago
• FullTang / AndroidPWList
  A password list optimized for use on Android devices.
  ☆11Updated 2 years ago
• cclgroupltd / chrome-profile-view
  Python web app for previewing data in a Chrome Profile Folder
  ☆16Updated 4 months ago
• dwmetz / Axiom-PowerShell
  PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
  ☆10Updated 2 months ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆61Updated 3 years ago
• net-protect / google-fs-recover
  Google Filestream Forensic Tool
  ☆16Updated 2 years ago
• CyberCX-DFIR / usnjrnl_rewind
  USN Journal full path builder
  ☆36Updated 2 months ago
• Digital-Forensics-Discord-Server / GitHubLearningPlayground
  Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…
  ☆12Updated 5 months ago
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆17Updated 3 years ago
• mnrkbys / ma2tl
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆89Updated last year
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆34Updated last year
• MattETurner / DFIRlogbook
  Logbook for Digital Forensics and Incident Response
  ☆49Updated 4 months ago
• EricZimmerman / TLEFilePlugins
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆22Updated 2 weeks ago
• AndrewRathbun / SANSGoldPaperResearch_FOR500_Rathbun
  A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.
  ☆25Updated 2 years ago
• strozfriedberg / plistutils
  Python utilities related to plists
  ☆52Updated 9 months ago
• Velocidex / SQLiteHunter
  Hunt for SQLite files used by various applications
  ☆10Updated 2 weeks ago