nrvana / macOS-triageLinks
macOS triage is a python script to collect various macOS logs, artifacts, and other data.
☆27Updated 4 years ago
Alternatives and similar repositories for macOS-triage
Users that are interested in macOS-triage are comparing it to the libraries listed below
Sorting:
- A DFVFS Backed Forensic Viewer☆40Updated 5 years ago
- Actionable analytics designed to combat threats based on MITRE's ATT&CK.☆22Updated 5 years ago
- Queries for parsed spotlight database in sqlite☆12Updated 4 years ago
- macOS Artifact Intelligence Tool☆13Updated 6 years ago
- Setting up a training environment for MISP☆12Updated 2 years ago
- CIRCL system forensic tools or a jumble of tools to support forensic☆42Updated 2 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆16Updated last year
- ☆24Updated 2 years ago
- Different DFIR and CTI utilities☆37Updated 5 years ago
- Binaries for the log2timeline projects and dependencies☆39Updated 9 months ago
- Indicators of compromise relating to our report on APT10's targeting of global MSPs☆10Updated 7 years ago
- Attempt to replicate the functions of auto_rip by Corey Harrell in Python.☆13Updated 10 months ago
- Automated Memory Forensic☆35Updated 6 years ago
- CyCAT.org taxonomies☆15Updated 4 years ago
- A rewrite of mactime, a bodyfile reader☆37Updated 10 months ago
- Best practices in threat intelligence☆47Updated 2 years ago
- YETI (Your Everyday Threat Intelligence) Integration to Elastic Stack☆16Updated 4 years ago
- Synopsis is a tool to aid analysts reviewing browser history files by providing a high-level “synopsis” of key information.☆21Updated 6 years ago
- Mass Triage Tools☆20Updated 4 months ago
- ☆16Updated 4 years ago
- This repository is a curated list of pro bono incident response entities.☆20Updated 2 years ago
- Git for me to put all my forensics stuff☆22Updated 5 months ago
- Looks stuff up (MD5, SHA256, IP, Domains, URL's, strings e.g. mutexes)...☆37Updated 8 years ago
- A collection of typical false positive indicators☆55Updated 4 years ago
- PowerSponse is a PowerShell module focused on targeted containment and remediation during incident response.☆38Updated 3 years ago
- Just Another broken Registry Parser (JARP)☆16Updated last year
- ☆39Updated 5 years ago
- A few quick recipes for those that do not have much time during the day☆22Updated 7 months ago
- ☆18Updated 7 years ago
- Automating forensic data extraction, reduction, and overall triage of cold disk and memory images.☆21Updated 6 years ago