A parsing tool for backgrounditems.btm
☆52Aug 23, 2024Updated last year
Alternatives and similar repositories for bgiparser
Users that are interested in bgiparser are comparing it to the libraries listed below
Sorting:
- Tool to rip system and user data from OSX and macOS☆16Dec 6, 2022Updated 3 years ago
- Enumerate Location Services using CoreLocation API on macOS☆18Dec 2, 2021Updated 4 years ago
- ☆22Oct 13, 2023Updated 2 years ago
- Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format☆40Jul 27, 2021Updated 4 years ago
- Allow services that are denied in the TCC database.☆11May 18, 2021Updated 4 years ago
- ☆31May 22, 2023Updated 2 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Wrapper for TSK (Sleuth Kit) Bindings☆12Jan 10, 2023Updated 3 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 3 years ago
- Proof of concept for CVE-2018-4150 by @cmwdotme☆14May 8, 2018Updated 7 years ago
- Parsers for common structures across windows formats.☆12Aug 23, 2023Updated 2 years ago
- CLI frontend for com.apple.decmpfs / AppleFSCompression.framework☆33Oct 18, 2022Updated 3 years ago
- A GUI for launchd, similar to launchctl. Or... something.☆13May 7, 2022Updated 3 years ago
- Slides and material from my conference presentations☆16Mar 30, 2024Updated last year
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Jan 9, 2023Updated 3 years ago
- A triage data collection script for macOS☆29Nov 27, 2020Updated 5 years ago
- Indicators of Normality☆11Jul 22, 2022Updated 3 years ago
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Parsers for .mdf file of Microsoft SQL Server (MSSQL)☆15Mar 28, 2020Updated 5 years ago
- An app to protect against process injection and suspicious file links on macOS☆229May 19, 2021Updated 4 years ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- Quickly open split source/preview views via hotkey or toolbar icon☆17Nov 19, 2022Updated 3 years ago
- Microsoft Edge Microsoft Edge主页算法☆20Apr 15, 2019Updated 6 years ago
- And open-source version of % sfltool dumpbtm☆146Oct 18, 2023Updated 2 years ago
- PoC code for CVE-2018-9539☆20Nov 11, 2018Updated 7 years ago
- macOS Artifact Intelligence Tool☆13Apr 30, 2019Updated 6 years ago
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆21Aug 3, 2024Updated last year
- Hacky scripts to fixup stack strings in Ghidra's decompiler.☆36May 22, 2022Updated 3 years ago
- Fun tools around the EBS Direct API☆19Apr 16, 2021Updated 4 years ago
- A small tool to easily mount APFS image on macOS for forensics.☆16Jul 30, 2020Updated 5 years ago
- macOS .DS_Store Parser☆76Aug 17, 2021Updated 4 years ago
- Copy data to your clipboard via the command line (including images, archive files, videos etc.) 📋☆16May 15, 2025Updated 9 months ago
- Python bindings for https://github.com/omerbenamram/mft☆23Dec 23, 2025Updated 2 months ago
- This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…☆17Sep 26, 2025Updated 5 months ago
- A Windows registry file parser written in Rust☆41Oct 30, 2025Updated 4 months ago
- Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…☆80Nov 21, 2023Updated 2 years ago
- Google Filestream Forensic Tool☆22Mar 10, 2022Updated 3 years ago
- A repository hosting example goodware evtx logs containing sample software installation and basic user interaction☆86Dec 17, 2025Updated 2 months ago
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆42Sep 21, 2023Updated 2 years ago