Alternatives and similar repositories for santa-linux:

Users that are interested in santa-linux are comparing it to the libraries listed below

• 0xbf00 / macos-sandbox-coverage
  Tools to measure an app's App Sandbox usage
  ☆24Updated 4 years ago
• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• theevilbit / macos
  ☆31Updated 9 months ago
• immune-gmbh / tpm-vuln-checker
  Checks for tpm vulnerabilities
  ☆36Updated last year
• ancat / egrets
  egrets monitors egress
  ☆46Updated 4 years ago
• claesmnyberg / netfuzz
  Fuzz Network Traffic
  ☆18Updated 2 months ago
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆71Updated 5 years ago
• ald3ns / XPR-dump
  Helper scripts to automate the extraction of YARA rules from XProtectRemediators
  ☆18Updated last year
• netspooky / notes
  ☆25Updated last year
• objective-see / TAOMM
  The Art of Mac Malware
  ☆39Updated 2 months ago
• usbarmory / armory-drive
  Armory Drive - USB encrypted drive with mobile unlock over BLE
  ☆53Updated last month
• buzzer-re / whoexec
  Discover which process execute a hunted binary inside macOS
  ☆24Updated 3 years ago
• airbus-cert / dirtypipe-ebpf_detection
  An eBPF detection program for CVE-2022-0847
  ☆28Updated 2 years ago
• knightsc / XProtect
  macOS XProtect definition files
  ☆40Updated 2 years ago
• kohnakagawa / cidre-vm
  Software installation scripts for macOS systems that allows you to setup a Virtual Machine (VM) for reverse engineering macOS malware
  ☆30Updated last month
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆28Updated 2 years ago
• vastlimits / esmat
  macOS Endpoint Security Message Analysis Tool
  ☆45Updated 3 years ago
• ant4g0nist / crashmon
  crashmon - A LLDB Based replacement for CrashWrangler
  ☆46Updated last year
• xorrior / xpcutil
  Golang Tool to interact with Launchd and other services with XPC
  ☆29Updated 4 years ago
• impost0r / Rotten-Apples
  macOS codesigning translocation vulnerability.
  ☆42Updated 3 years ago
• ergot86 / itlb_poc
  iTLB multihit PoC
  ☆40Updated last year
• dgl / vt-houdini
  ☆45Updated last year
• joxeankoret / deeptoad
  DeepToad is a library and a tool to clusterize similar files using fuzzy hashing
  ☆20Updated 4 years ago
• blacktop / seccomp-gen
  Docker Secure Computing Profile Generator
  ☆48Updated 3 years ago
• cedowens / Persistent-Swift
  A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…
  ☆31Updated 3 years ago
• gen0cide / listening_ports
  Shell utility to list colorfully show what processes are listening on what ports.
  ☆19Updated 5 years ago
• f0rki / bn-goloader
  go reversing helpers for binaryninja
  ☆28Updated 2 years ago
• ameserole / Akeso
  A Platform for Testing Secure Coding/Config
  ☆18Updated 6 years ago
• xpcmdshell / electron-probe
  ☆31Updated 3 years ago
• antman1p / PrintTCCdb
  JXA script for Mythic that prints the TCC.db
  ☆15Updated 3 years ago