Alternatives and similar repositories for santa-linux

Users that are interested in santa-linux are comparing it to the libraries listed below

• ald3ns / XPR-dump
  Helper scripts to automate the extraction of YARA rules from XProtectRemediators
  ☆21Updated last year
• theevilbit / macos
  ☆33Updated last year
• msuiche / elegant-bouncer
  ELEGANTBOUNCER is a detection tool for file-based mobile exploits.
  ☆152Updated last week
• milabs / lkrg-bypass
  LKRG bypass methods
  ☆73Updated 5 years ago
• immune-gmbh / tpm-vuln-checker
  Checks for tpm vulnerabilities
  ☆37Updated 2 years ago
• claesmnyberg / netfuzz
  Network Traffic Fuzzer
  ☆18Updated 8 months ago
• vastlimits / esmat
  macOS Endpoint Security Message Analysis Tool
  ☆47Updated 3 years ago
• ergot86 / itlb_poc
  iTLB multihit PoC
  ☆42Updated last year
• xorrior / xpcutil
  Golang Tool to interact with Launchd and other services with XPC
  ☆29Updated 5 years ago
• 0xbf00 / macos-sandbox-coverage
  Tools to measure an app's App Sandbox usage
  ☆25Updated 5 years ago
• mdowd79 / presentations
  ☆79Updated last year
• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• buzzer-re / whoexec
  Discover which process execute a hunted binary inside macOS
  ☆26Updated 3 years ago
• ForensicITGuy / libpreloadvaccine
  Whitelisting LD_PRELOAD libraries using LD_AUDIT
  ☆63Updated 3 years ago
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆40Updated 4 years ago
• impost0r / Rotten-Apples
  macOS codesigning translocation vulnerability.
  ☆42Updated 4 years ago
• ancat / egrets
  egrets monitors egress
  ☆46Updated 5 years ago
• silascutler / DetuxNG
  The Multiplatform Linux Sandbox
  ☆16Updated last year
• ulexec / SHELF-Loading
  Evasive ELF Static PIE User-Land-Exec featured in Tmpout Vol 1.
  ☆28Updated 4 years ago
• JonathonReinhart / nosecmem
  Demonstrate ability to read memfd_secret() data from the kernel
  ☆58Updated last year
• mgrube / GRUBKit
  Skeleton project for your own GRUB-based bootkit
  ☆16Updated 5 years ago
• netspooky / notes
  ☆27Updated 2 years ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆31Updated 2 years ago
• c-skills / passport
  ☆23Updated last year
• slyd0g / SwiftInMemoryLoading
  Swift implementation of in-memory Mach-O loading on macOS
  ☆64Updated 3 years ago
• 0xbigshaq / redis-afl
  An automated setup for fuzzing Redis w/ AFL++
  ☆34Updated 3 years ago
• kohnakagawa / cidre-vm
  Software installation scripts for macOS systems that allows you to setup a Virtual Machine (VM) for reverse engineering macOS malware
  ☆37Updated 3 months ago
• pstirparo / machofile
  machofile is a module to parse Mach-O binary files
  ☆89Updated last month
• WithSecureLabs / ESFang
  ESF modular ingestion tool for development and research.
  ☆37Updated 3 years ago
• milabs / stamina
  (Linux Kernel) Stack Monitoring Tool
  ☆47Updated 3 years ago