Alternatives and similar repositories for mac4n6:

Users that are interested in mac4n6 are comparing it to the libraries listed below

• dlcowen / FSEventsParser
  Parser for OSX/iOS FSEvents Logs
  ☆248Updated 5 months ago
• CrowdStrike / automactc
  AutoMacTC: Automated Mac Forensic Triage Collector
  ☆540Updated 3 years ago
• mac4n6 / Presentations
  Presentation Archives for my macOS and iOS Related Research
  ☆252Updated last month
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆331Updated 5 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆337Updated 2 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆186Updated 2 years ago
• ydkhatri / UnifiedLogReader
  A parser for Unified logging tracev3 files
  ☆86Updated last year
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆211Updated 8 years ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 3 years ago
• cheeky4n6monkey / iOS_sysdiagnose_forensic_scripts
  Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.
  ☆190Updated 2 years ago
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆311Updated this week
• mac4n6 / macMRU-Parser
  Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.
  ☆104Updated 7 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆200Updated 2 years ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆207Updated 4 months ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆203Updated 3 years ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆500Updated 2 years ago
• dod-cyber-crime-center / DC3-MWCP
  DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …
  ☆316Updated 2 months ago
• droe / xnumon
  monitor macOS for malicious activity
  ☆233Updated 3 months ago
• mandiant / ShimCacheParser
  ☆276Updated 2 years ago
• abrignoni / DFIR-SQL-Query-Repo
  Collection of SQL query templates for digital forensics use by platform and application.
  ☆103Updated 4 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆127Updated 9 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆380Updated 5 months ago
• py4n6 / pytsk
  Python bindings for The Sleuth Kit (libtsk)
  ☆98Updated last month
• mac4n6 / APOLLO
  Apple Pattern of Life Lazy Output'er
  ☆584Updated last year
• Xumeiquer / yara-forensics
  Set of Yara rules for finding files using magics headers
  ☆137Updated 4 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆260Updated 7 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆192Updated last month
• davidpany / WMI_Forensics
  ☆302Updated 4 years ago
• jbradley89 / osx_incident_response_scripting_and_analysis
  Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…
  ☆49Updated 8 years ago
• sdckey / EnScript-Samples
  This repository is a collection of EnScript code samples for use in the OpenText EnCase application.
  ☆53Updated 3 weeks ago