nicoleibrahim / DSStoreParser
macOS .DS_Store Parser
☆66Updated 3 years ago
Alternatives and similar repositories for DSStoreParser:
Users that are interested in DSStoreParser are comparing it to the libraries listed below
- Logbook for Digital Forensics and Incident Response☆50Updated 8 months ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆92Updated last year
- Forensic Artifact Collection Tool for macOS☆110Updated 6 months ago
- Digital Forensics Artifacts Knowledge Base☆80Updated 10 months ago
- acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.☆99Updated 2 weeks ago
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆72Updated last year
- A happy place for detection engineers, purple teamers and threat hunters focusing on macOS.☆21Updated 2 years ago
- The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images☆80Updated last year
- Scripts for MacOS related tasks.☆18Updated 5 years ago
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆41Updated 3 years ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆30Updated last year
- ReWrite of AChoir in Go for Cross Platform☆39Updated last month
- Memory Baseliner is a script that can compare two windows memory images or perform frequency of occurrence / data stacking analysis on mu…☆52Updated last year
- A zero dependency and customizable Python library for scanning Windows and Linux process memory.☆66Updated last year
- Parser fo macOS/iOS FSEvents Logs☆33Updated 10 months ago
- A repo for centralizing ongoing research on the new Windows 10/11 DFIR artifact, EventTranscript.db.☆39Updated 2 years ago
- A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…☆26Updated 2 years ago
- ☆86Updated last year
- Different DFIR and CTI utilities☆36Updated 4 years ago
- Script that checks for available updates for the most commonly used Digital Forensics tools☆59Updated 4 years ago
- Hunt malware with Volatility☆47Updated 10 months ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆20Updated 4 years ago
- A new Cyber Threat Intelligence Capability Maturity Model (CTI-CMM) to empower your team and create lasting value. Inspired by Industry N…☆26Updated last week
- Just Another broken Registry Parser (JARP)☆16Updated 10 months ago
- ☆40Updated 4 years ago
- A forensic open-source parser module for Autopsy that allows extracting the messages, comments, posts, contacts, calendar entries and rea…☆83Updated 8 months ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆68Updated 4 years ago
- ESXi Cyber Security Incident Response Script☆23Updated 6 months ago
- ☆20Updated 2 weeks ago
- ☆18Updated 2 years ago