mac4n6 / HFSPlus_ResourcesLinks
Resources for HFS+ Forensics
☆37Updated 10 years ago
Alternatives and similar repositories for HFSPlus_Resources
Users that are interested in HFSPlus_Resources are comparing it to the libraries listed below
Sorting:
- Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.☆105Updated 7 years ago
- Dump the iOS Frequent Location binary plist files☆85Updated 7 years ago
- iOS forensics utility☆12Updated 7 years ago
- macOS/iOS database location scraper to extract location data☆85Updated 3 years ago
- MantaRay Automated Computer Forensic Triage Tool☆65Updated 6 years ago
- ☆33Updated 13 years ago
- Parse IE, FireFox, Chrome and Safari Cookies for Google Analytic values☆23Updated 9 years ago
- Parses for Google Analytic values in raw files like RAM, DD images etc.☆18Updated 9 years ago
- "Fuzzy matching" for SQLite databases☆30Updated 5 years ago
- incident response tool for iOS devices☆49Updated 3 years ago
- Parse Manifest.mbdb files from iTunes backup directories☆20Updated 8 years ago
- Automatically exported from code.google.com/p/pac4mac☆40Updated 6 years ago
- A script to mine SQLite databases for hidden gems that might be overlooked☆57Updated 5 years ago
- A sort of a toolkit to decrypt Dropbox Windows DBX files☆30Updated 8 years ago
- Kirjuri is a web application for managing cases and physical forensic evidence items.☆107Updated 4 years ago
- ☆32Updated 5 years ago
- Digital Forensics Windows Registry (dfWinReg)☆52Updated last month
- Lite version of PDF X-RAY that uses no backend☆36Updated 14 years ago
- parser for Google search strings☆39Updated 6 years ago
- Parse the Mac Quickook index.sqlite database☆55Updated 9 years ago
- shell script to create an image and perform initial examination on a drive☆15Updated 5 years ago
- Forensic Scripts☆153Updated 7 months ago
- Python script to batch query the Tor Relays and Bridges☆36Updated 6 years ago
- Python utilities related to plists☆55Updated 2 weeks ago
- Different DFIR and CTI utilities☆37Updated 5 years ago
- Maltego Transform to put entities into MISP events☆28Updated 4 years ago
- This is a prototype system that uses Hadoop to process hard drive images.☆55Updated 13 years ago
- Volatility plugin to extract FileVault 2 VMK's☆51Updated 4 years ago
- A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to s…☆83Updated 9 years ago
- Decrypts local iOS backups and recreates file system, with a framework for automatically extracting useful information☆43Updated 10 years ago