A library to parse macOS FsEvents
☆26Aug 28, 2022Updated 4 years ago
Alternatives and similar repositories for macos-fseventsd
Users that are interested in macos-fseventsd are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Yet another fseventsd parser for macOS forensics☆12Jul 20, 2024Updated 2 years ago
- A library to parse macOS LoginItems☆18Aug 28, 2022Updated 4 years ago
- Forensic Artifact Collection Tool for macOS☆121Jul 28, 2025Updated last year
- A Forensic SQLite Database Analyser and Reporting Tool written in Python 2.7.☆15Aug 6, 2018Updated 8 years ago
- Tools for macOS Forensic Bootable media☆16May 20, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Parser fo macOS/iOS FSEvents Logs☆46May 6, 2024Updated 2 years ago
- Module(s) related to reading SEGB (fka "Biome") data from iOS, mascOS, etc.☆38Jul 13, 2026Updated 2 months ago
- AIFT is a GUI, CLI, REST API, and MCP tool that helps DFIR analysts get oriented quickly. Point it at disk images, VM images, forensic ar…☆45Jun 13, 2026Updated 3 months ago
- A parser for Unified logging tracev3 files☆103Jul 25, 2025Updated last year
- A cross platform parser for Apple UnifiedLogs!☆376Updated this week
- Fetch imessages from chat.db☆122Aug 20, 2025Updated last year
- ESXi Cyber Security Incident Response Script☆28Sep 4, 2024Updated 2 years ago
- Bash script for performing the logical acquisition of Apple Silicon Mac☆18Jun 21, 2024Updated 2 years ago
- ☆25Apr 22, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Jan 9, 2023Updated 3 years ago
- macOS .DS_Store Parser☆81Aug 17, 2021Updated 5 years ago
- ☆26Apr 27, 2021Updated 5 years ago
- PS-TrustedDocuments: PowerShell script to handle information on trusted documents for Microsoft Office☆37Mar 15, 2023Updated 3 years ago
- Quick and dirty script to parse bplists with Ruby☆14Oct 29, 2020Updated 5 years ago
- macOS (& ios) Artifact Parsing Tool☆1,083Aug 21, 2026Updated 3 weeks ago
- Java library for reading Microsoft Outlook pst and ost files☆28Jul 31, 2025Updated last year
- Open source version of Apple's restored_external on the iPhone restore ramdisk☆16Jun 2, 2010Updated 16 years ago
- Admin for☆16Jun 3, 2018Updated 8 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A pure PowerShell/ .NET DFIR capability that dumps the Windows SRUM (System Resource Usage Monitor) database to CSVs for analysis.☆14Oct 21, 2021Updated 4 years ago
- Aftermath is a free macOS IR framework☆598Sep 25, 2025Updated 11 months ago
- Alternative password shadowing scheme☆12Aug 1, 2026Updated last month
- ☆11Feb 9, 2023Updated 3 years ago
- This is to edit a training forensic image file (raw/dd) and zero out all the unnecessary files.☆11Jun 21, 2025Updated last year
- Secure AI-enabled digital forensics toolkit built with Model Context Protocol☆28Jun 10, 2025Updated last year
- Perform file-based malware scan on your on-prem servers with AWS☆14Oct 31, 2023Updated 2 years ago
- 🌌 Real-time threat detection for smart contracts☆10May 16, 2023Updated 3 years ago
- Digital forensics for Google Drive—done right. Identify, preserve, and document cloud evidence with hash verification, timeline reconstru…☆30Dec 8, 2025Updated 9 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Some of my rough notes for Docker threat detection☆51Aug 26, 2023Updated 3 years ago
- JSON Power Tool: Retrieve and manipulate JSON data using JSONPath, JSON Pointer, JSON Patch, and JSON Merge Patch. Written in Javascript,…☆34Nov 6, 2023Updated 2 years ago
- ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.☆36Jun 1, 2023Updated 3 years ago
- 🔑 Edit iOS Keychain backups without jailbreaking☆16Sep 7, 2026Updated last week
- Collection of popular DFIR tools in a lightweight and fast docker image☆11Nov 17, 2019Updated 6 years ago
- macOS forensic acquisition made simple☆300Jun 2, 2026Updated 3 months ago
- ☆15Oct 4, 2012Updated 13 years ago