mac4n6 / HFSPlus_Resources
Resources for HFS+ Forensics
☆35Updated 9 years ago
Related projects ⓘ
Alternatives and complementary repositories for HFSPlus_Resources
- Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.☆101Updated 6 years ago
- Dump the iOS Frequent Location binary plist files☆82Updated 6 years ago
- macOS/iOS database location scraper to extract location data☆77Updated 2 years ago
- Parse IE, FireFox, Chrome and Safari Cookies for Google Analytic values☆23Updated 8 years ago
- iOS forensics utility☆12Updated 6 years ago
- "Fuzzy matching" for SQLite databases☆29Updated 4 years ago
- incident response tool for iOS devices☆49Updated 2 years ago
- ☆33Updated 12 years ago
- A tool designed for consistent and safe capture of off network web resources.☆37Updated 7 years ago
- Scripts to extract compound bplists in the iOS -> KnowledgeC.db -> structuredmetadata table.☆22Updated 5 years ago
- A script to mine SQLite databases for hidden gems that might be overlooked☆53Updated 4 years ago
- Parses for Google Analytic values in raw files like RAM, DD images etc.☆18Updated 8 years ago
- Public Maltego Transforms☆23Updated 7 years ago
- Maltego Transform to put entities into MISP events☆26Updated 3 years ago
- MantaRay Automated Computer Forensic Triage Tool☆63Updated 5 years ago
- Fast Evidence Collector Toolkit is an incident response toolkit to collect evidences on a suspicious windows computer☆40Updated 4 years ago
- Transforms for the AlienVault OTX service☆39Updated 8 years ago
- Decrypts local iOS backups and recreates file system, with a framework for automatically extracting useful information☆40Updated 9 years ago
- Forensic Dropbox☆21Updated 12 years ago
- Evidence Fetcher (efetch) is a web-based file explorer, viewer, and analyzer.☆37Updated 4 years ago
- Automatically exported from code.google.com/p/pac4mac☆40Updated 5 years ago
- Volatility plugin to extract FileVault 2 VMK's☆49Updated 3 years ago
- Some dfir stuff☆31Updated 2 years ago
- Search pastebin for keywords using python☆33Updated 12 years ago
- Why hunt when you can seine?☆21Updated 9 years ago
- Discover potential timestamps within the Windows Registry☆18Updated 10 years ago
- Performs OCR on image files and scans them for matches to YARA rules☆40Updated 6 years ago
- A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…☆79Updated 8 years ago