mnrkbys / norimaciLinks
Norimaci is a simple and lightweight malware analysis sandbox for macOS
☆70Updated 5 years ago
Alternatives and similar repositories for norimaci
Users that are interested in norimaci are comparing it to the libraries listed below
Sorting:
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆109Updated 3 years ago
- A minimal malware analysis sandbox for macOS☆34Updated 2 years ago
- Forensic Artifact Collection Tool for macOS☆116Updated 4 months ago
- Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.☆75Updated 3 years ago
- Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format☆41Updated 4 years ago
- A Swift port of some of the original PersistentJXA projects by D00MFist. Original PersistentJXA repo: https://github.com/D00MFist/Persist…☆34Updated 4 years ago
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Updated last year
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆93Updated 2 years ago
- volatility explorer☆92Updated 5 years ago
- Modular malware analysis artifact collection and correlation framework☆53Updated last year
- machofile is a module to parse Mach-O binary files☆89Updated 4 months ago
- A proof of concept for a clickjacking attack on macOS.☆95Updated last year
- ☆33Updated last year
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆143Updated 2 months ago
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆20Updated 4 years ago
- YARI is an interactive debugger for YARA Language.☆89Updated 3 months ago
- ObjectiveC CLI tool for interacting with macOS Keychain☆81Updated 3 years ago
- Imphash-like calculation on Golang binaries☆49Updated 3 years ago
- Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff☆57Updated 2 months ago
- ☆23Updated 2 years ago
- ☆24Updated last year
- Application Hijack Scanner for macOS☆71Updated 4 years ago
- Forblaze - A Python Mac Steganography Payload Generator☆57Updated 3 years ago
- QuasarRAT analysis tools and research report☆27Updated last year
- ☆27Updated last year
- YARA Language Server☆75Updated 3 weeks ago
- SecuritySnack data that doesn't fit into a single tweet.☆42Updated this week
- Lazarus analysis tools and research report☆57Updated last year
- A triage data collection script for macOS☆28Updated 5 years ago