puffyCid / macos-fseventsdLinks
A library to parse macOS FsEvents
☆23Updated 3 years ago
Alternatives and similar repositories for macos-fseventsd
Users that are interested in macos-fseventsd are comparing it to the libraries listed below
Sorting:
- A parser for Unified logging tracev3 files☆96Updated 6 months ago
- A cross platform parser for Apple UnifiedLogs!☆316Updated this week
- Read and extract data from macOS spotlight databases☆128Updated last month
- Parser fo macOS/iOS FSEvents Logs☆42Updated last year
- Python utilities related to plists☆55Updated 3 months ago
- A command line tool for pstree-like output on macOS with additional pid capturing capabilities☆274Updated last year
- Scripts to process macOS forensic artifacts☆204Updated last year
- Forensic Artifact Collection Tool for macOS☆118Updated 6 months ago
- And open-source version of % sfltool dumpbtm☆146Updated 2 years ago
- Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.☆27Updated 4 months ago
- Mapping XProtect's obfuscated malware family names to common industry names.☆92Updated 2 months ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆67Updated 5 years ago
- iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…☆70Updated last year
- Queries for parsed spotlight database in sqlite☆12Updated 5 years ago
- Slides and material from my conference presentations☆16Updated last year
- File recovery for APFS☆161Updated 3 years ago
- NSKeyedArchive plist deserializer☆28Updated last year
- Yet another fseventsd parser for macOS forensics☆11Updated last year
- Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…☆79Updated 2 years ago
- Parser for OSX/iOS FSEvents Logs☆272Updated last year
- A DNS Monitor, leveraging Apple's NEDNSProxyProvider/Network Extension Framework☆207Updated last year
- Forensic toolkit for iOS sysdiagnose feature☆241Updated last week
- ☆22Updated 3 years ago
- View all modules on that are loaded in the OS kernel☆84Updated 2 years ago
- Bash script for performing the logical acquisition of Apple Silicon Mac☆16Updated last year
- A parsing tool for backgrounditems.btm☆52Updated last year
- Various scripts for macOS tasks☆141Updated 2 months ago
- Tools for macOS Forensic Bootable media☆14Updated 5 years ago
- macOS Endpoint Security Message Analysis Tool☆47Updated 4 years ago
- 010 template for apfs☆26Updated 4 years ago