Alternatives and similar repositories for mac4n6

Users that are interested in mac4n6 are comparing it to the libraries listed below

• dlcowen / FSEventsParser
  Parser for OSX/iOS FSEvents Logs
  ☆265Updated 10 months ago
• CrowdStrike / automactc
  AutoMacTC: Automated Mac Forensic Triage Collector
  ☆552Updated 3 years ago
• mac4n6 / Presentations
  Presentation Archives for my macOS and iOS Related Research
  ☆257Updated 7 months ago
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆335Updated 5 years ago
• mac4n6 / macMRU-Parser
  Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.
  ☆105Updated 7 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆190Updated 3 years ago
• ydkhatri / UnifiedLogReader
  A parser for Unified logging tracev3 files
  ☆95Updated 3 months ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆342Updated 3 years ago
• mac4n6 / APOLLO
  Apple Pattern of Life Lazy Output'er
  ☆623Updated last year
• abrignoni / DFIR-SQL-Query-Repo
  Collection of SQL query templates for digital forensics use by platform and application.
  ☆110Updated 4 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆213Updated 2 weeks ago
• droe / xnumon
  monitor macOS for malicious activity
  ☆235Updated 8 months ago
• sdckey / EnScript-Samples
  This repository is a collection of EnScript code samples for use in the OpenText Endpoint Forensic and OpenText Endpoint Investigator app…
  ☆54Updated 3 months ago
• lancemueller / EnCase-EnScripts
  General repository for compiled and uncompiled EnCase EnScripts
  ☆46Updated 4 years ago
• ahoog42 / ios-triage
  incident response tool for iOS devices
  ☆49Updated 3 years ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆332Updated 2 weeks ago
• mandiant / ShimCacheParser
  ☆278Updated 2 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆128Updated 9 years ago
• Invoke-IR / ForensicPosters
  ☆451Updated 11 months ago
• jbradley89 / osx_incident_response_scripting_and_analysis
  Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…
  ☆50Updated 9 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆270Updated 4 years ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆272Updated 5 years ago
• n0fate / volafox
  Mac OS X Memory Analysis Toolkit
  ☆170Updated 9 years ago
• pstirparo / utils
  Different DFIR and CTI utilities
  ☆37Updated 5 years ago
• cheeky4n6monkey / iOS_sysdiagnose_forensic_scripts
  Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.
  ☆201Updated 3 years ago
• mdegrazia / SQLite-Deleted-Records-Parser
  Script to recover deleted entries in an SQLite database
  ☆192Updated 9 years ago
• teamdfir / sift
  SIFT
  ☆519Updated last year
• richiercyrus / Venator
  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
  ☆177Updated 5 years ago
• dod-cyber-crime-center / DC3-MWCP
  DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …
  ☆335Updated 8 months ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆388Updated 3 months ago