Alternatives and similar repositories for santa-linux

Users that are interested in santa-linux are comparing it to the libraries listed below

• ald3ns / XPR-dump
  Helper scripts to automate the extraction of YARA rules from XProtectRemediators
  ☆20Updated last year
• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• 0xbf00 / macos-sandbox-coverage
  Tools to measure an app's App Sandbox usage
  ☆25Updated 5 years ago
• xorrior / xpcutil
  Golang Tool to interact with Launchd and other services with XPC
  ☆29Updated 5 years ago
• theevilbit / macos
  ☆31Updated last year
• AtropineTears / TheMacHardeningScripts
  Scripts to secure and harden Mac OS X
  ☆31Updated 3 years ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆29Updated 2 years ago
• airbus-seclab / airbus-seclab.github.io
  Conferences, tools, papers, etc.
  ☆43Updated last month
• immune-gmbh / tpm-vuln-checker
  Checks for tpm vulnerabilities
  ☆37Updated 2 years ago
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆40Updated 3 years ago
• vastlimits / esmat
  macOS Endpoint Security Message Analysis Tool
  ☆47Updated 3 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆63Updated 3 years ago
• claesmnyberg / netfuzz
  Fuzz Network Traffic
  ☆18Updated 6 months ago
• objective-see / TAOMM
  The Art of Mac Malware
  ☆46Updated last week
• taviso / scanlimits
  Tool to examine the behaviour of setuid binaries under constrained limits.
  ☆61Updated 4 years ago
• xorrior / goesf
  Golang command line tool for the macOS Endpoint Security Framework
  ☆29Updated 5 years ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆72Updated 5 years ago
• netspooky / notes
  ☆27Updated 2 years ago
• grimm-co / linuxklee
  Pulled out Linux kernel code to run in userland so they could be targeted by AFL and KLEE
  ☆20Updated 5 years ago
• SELinuxProject / selint
  Static code analysis of refpolicy style SELinux policy
  ☆44Updated 3 months ago
• silascutler / DetuxNG
  The Multiplatform Linux Sandbox
  ☆16Updated last year
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 3 years ago
• mdowd79 / presentations
  ☆77Updated last year
• sophieschmieg / exploits
  ☆13Updated 4 years ago
• ergot86 / itlb_poc
  iTLB multihit PoC
  ☆41Updated last year
• pstirparo / machofile
  machofile is a module to parse Mach-O binary files
  ☆51Updated last year
• 0xbigshaq / redis-afl
  An automated setup for fuzzing Redis w/ AFL++
  ☆34Updated 3 years ago
• cedowens / Persistent-Swift
  A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…
  ☆32Updated 4 years ago
• trailofbits / ebpfpub
  ebpfpub is a generic function tracing library for Linux that supports tracepoints, kprobes and uprobes.
  ☆116Updated 2 years ago
• joxeankoret / deeptoad
  DeepToad is a library and a tool to clusterize similar files using fuzzy hashing
  ☆20Updated 5 years ago