nicoleibrahim / DSStoreParserLinks
macOS .DS_Store Parser
☆66Updated 3 years ago
Alternatives and similar repositories for DSStoreParser
Users that are interested in DSStoreParser are comparing it to the libraries listed below
Sorting:
- Forensic Artifact Collection Tool for macOS☆110Updated 8 months ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆94Updated last year
- Stand-alone parser for User Access Logging from Server 2012 and newer systems☆73Updated last year
- Parser fo macOS/iOS FSEvents Logs☆35Updated last year
- Script that checks for available updates for the most commonly used Digital Forensics tools☆59Updated 4 years ago
- acquire is a tool to quickly gather forensic artifacts from disk images or a live system into a lightweight container.☆103Updated 2 weeks ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆68Updated 4 years ago
- Scripts for MacOS related tasks.☆18Updated 5 years ago
- Digital Forensics Artifacts Knowledge Base☆81Updated last year
- The home of the BriMor Labs rdpieces Perl script that tries to rebuild parsed RDP Bitmap Cache images☆80Updated last year
- evtx2json extracts events of interest from event logs, dedups them, and exports them to json.☆42Updated 4 years ago
- A triage data collection script for macOS☆28Updated 4 years ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆20Updated 4 years ago
- Chrome Logs Events and Protobuf Parser☆39Updated 2 years ago
- WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.☆32Updated last year
- A parser for Unified logging tracev3 files☆86Updated last year
- CSIRT Jump Bag☆26Updated last year
- ESXi Cyber Security Incident Response Script☆22Updated 9 months ago
- Information about the open-source-dfir slack community☆29Updated last year
- A sample VHDX file with multiple verbose examples of forensic and anti-forensics artifacts. Meant to be basic and can be expanded upon. P…☆27Updated 2 years ago
- Linux Evidence Acquisition Framework☆118Updated 8 months ago
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆107Updated 2 years ago
- isodump - ISO dump utility☆40Updated 5 years ago
- Payload designed for targeting Jamf enrolled devices.☆38Updated 2 years ago
- Different DFIR and CTI utilities☆37Updated 5 years ago
- A ruleset to find potentially malicious code in macOS malware samples☆40Updated last year
- ☆39Updated 4 years ago
- Post-Infection Collection Toolkit☆95Updated 2 years ago
- machofile is a module to parse Mach-O binary files☆51Updated last year
- Manipulate timestamps on NTFS☆51Updated 10 years ago