Alternatives and similar repositories for mac4n6

Users that are interested in mac4n6 are comparing it to the libraries listed below

• dlcowen / FSEventsParser
  Parser for OSX/iOS FSEvents Logs
  ☆253Updated 6 months ago
• CrowdStrike / automactc
  AutoMacTC: Automated Mac Forensic Triage Collector
  ☆541Updated 3 years ago
• mac4n6 / Presentations
  Presentation Archives for my macOS and iOS Related Research
  ☆254Updated 3 months ago
• cheeky4n6monkey / iOS_sysdiagnose_forensic_scripts
  Scripts to parse various iOS sysdiagnose logs. Based upon the forensic research of Mattia Epifani, Heather Mahalik and Cheeky4n6monkey.
  ☆195Updated 2 years ago
• orlikoski / CDQR
  The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…
  ☆338Updated 2 years ago
• CrowdStrike / Forensics
  Scripts and code referenced in CrowdStrike blog posts
  ☆331Updated 5 years ago
• OMENScan / AChoir
  Windows Live Artifacts Acquisition Script
  ☆188Updated 3 years ago
• ydkhatri / UnifiedLogReader
  A parser for Unified logging tracev3 files
  ☆87Updated last year
• log2timeline / dftimewolf
  A framework for orchestrating forensic collection, processing and data export
  ☆324Updated last week
• mac4n6 / APOLLO
  Apple Pattern of Life Lazy Output'er
  ☆589Updated last year
• abrignoni / DFIR-SQL-Query-Repo
  Collection of SQL query templates for digital forensics use by platform and application.
  ☆106Updated 4 years ago
• 504ensicsLabs / DAMM
  Differential Analysis of Malware in Memory
  ☆212Updated 8 years ago
• mac4n6 / macMRU-Parser
  Python script to parse the Most Recently Used (MRU) plist files on macOS into a more human friendly format.
  ☆104Updated 7 years ago
• Velocidex / c-aff4
  An AFF4 C++ implementation.
  ☆202Updated 2 years ago
• matonis / page_brute
  Page File analysis tools.
  ☆127Updated 9 years ago
• kevthehermit / VolUtility
  Web App for Volatility framework
  ☆381Updated 7 months ago
• orlikoski / Skadi
  Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
  ☆499Updated 2 years ago
• n0fate / volafox
  Mac OS X Memory Analysis Toolkit
  ☆171Updated 8 years ago
• williballenthin / EVTXtract
  EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
  ☆195Updated 3 months ago
• log2timeline / dfvfs
  Digital Forensics Virtual File System (dfVFS)
  ☆210Updated 5 months ago
• droe / xnumon
  monitor macOS for malicious activity
  ☆234Updated 4 months ago
• mbevilacqua / appcompatprocessor
  "Evolving AppCompat/AmCache data analysis beyond grep"
  ☆205Updated 3 years ago
• markmckinnon / Autopsy-Plugins
  Autopsy Python Plugins
  ☆356Updated 3 weeks ago
• halpomeranz / lmg
  Script for automating Linux memory capture and analysis
  ☆270Updated 5 years ago
• mandiant / ShimCacheParser
  ☆277Updated 2 years ago
• JamesHabben / evolve
  Web interface for the Volatility Memory Forensics Framework
  ☆259Updated 7 years ago
• sdckey / EnScript-Samples
  This repository is a collection of EnScript code samples for use in the OpenText EnCase application.
  ☆53Updated 2 months ago
• teamdfir / sift
  SIFT
  ☆511Updated last year
• cheeky4n6monkey / 4n6-scripts
  Forensic Scripts
  ☆152Updated 2 months ago
• mkorman90 / VolatilityBot
  VolatilityBot – An automated memory analyzer for malware samples and memory dumps
  ☆264Updated 4 years ago