Alternatives and similar repositories for mac4n6

Users that are interested in mac4n6 are comparing it to the libraries listed below

• CrowdStrike / automactc
  AutoMacTC: Automated Mac Forensic Triage Collector
  ☆541Updated 3 years ago
• dlcowen / FSEventsParser
  Parser for OSX/iOS FSEvents Logs
  ☆251Updated 6 months ago
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆331Updated 5 years ago
• mac4n6 / Presentations
  Presentation Archives for my macOS and iOS Related Research
  ☆252Updated 2 months ago
• cheeky4n6monkey / iOS_sysdiagnose_forensic_scripts
  Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.
  ☆194Updated 2 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆337Updated 2 years ago
• ydkhatri / UnifiedLogReader
  A parser for Unified logging tracev3 files
  ☆86Updated last year
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆315Updated last week
• teamdfir / sift
  SIFT
  ☆508Updated last year
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆188Updated 2 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆201Updated 2 years ago
• n0fate / volafox
  Mac OS X Memory Analysis Toolkit
  ☆168Updated 8 years ago
• mnrkbys / macosac
  Forensic Artifact Collection Tool for macOS
  ☆110Updated 8 months ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆501Updated 2 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆381Updated 6 months ago
• mac4n6 / APOLLO
  Apple Pattern of Life Lazy Output'er
  ☆585Updated last year
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆204Updated 3 years ago
• mac4n6 / macMRU-Parser
  Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.
  ☆104Updated 7 years ago
• davidpany / WMI_Forensics
  ☆302Updated 4 years ago
• markmckinnon / Autopsy-Plugins
  Autopsy Python Plugins
  ☆353Updated this week
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆269Updated 5 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆260Updated 7 years ago
• dod-cyber-crime-center / DC3-MWCP
  DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …
  ☆321Updated 3 months ago
• ahoog42 / ios-triage
  incident response tool for iOS devices
  ☆49Updated 3 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆211Updated 8 years ago
• mandiant / ShimCacheParser
  ☆276Updated 2 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 3 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆127Updated 9 years ago
• CheckPointSW / Cuckoo-AWS
  Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling…
  ☆136Updated 3 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆193Updated 2 months ago