puffyCid / macos-fseventsd

Related projects ⓘ

Alternatives and complementary repositories for macos-fseventsd

• mac4n6 / FSEventsParser
  Parser fo macOS/iOS FSEvents Logs
  ☆26Updated 6 months ago
• mcarmanize / esfriend
  A minimal malware analysis sandbox for macOS
  ☆26Updated last year
• mnrkbys / macosac
  Forensic Artifact Collection Tool for macOS
  ☆98Updated 2 months ago
• strozfriedberg / plistutils
  Python utilities related to plists
  ☆52Updated 9 months ago
• ydkhatri / UnifiedLogReader
  A parser for Unified logging tracev3 files
  ☆80Updated 10 months ago
• mandiant / macos-UnifiedLogs
  ☆211Updated this week
• objective-see / KextViewr
  View all modules on that are loaded in the OS kernel
  ☆67Updated last year
• SentineLabs / XProtect-Malware-Families
  Mapping XProtect's obfuscated malware family names to common industry names.
  ☆82Updated 6 months ago
• ScottKjr3347 / iOS_Local_PL_Photos.sqlite_Queries
  iOS Photos.sqlite queries that may help with decoding data stored in Photos.sqlite. These queries are based on testing, research and some…
  ☆64Updated 8 months ago
• BlackSquirrelz / nidaba
  Some thingy that copies macOS specific forensic artifacts to the location where the script is run from and also generates some folders. B…
  ☆14Updated last week
• objective-see / DumpBTM
  And open-source version of % sfltool dumpbtm
  ☆114Updated last year
• PhorionTech / Kronos
  Phorion Kronos is a macOS security tool designed to enhance Apple's Transparency Consent and Control (TCC) security and privacy mechanism…
  ☆71Updated last year
• ydkhatri / spotlight_queries
  Queries for parsed spotlight database in sqlite
  ☆11Updated 3 years ago
• mnrkbys / bgiparser
  A parsing tool for backgrounditems.btm
  ☆47Updated 2 months ago
• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 3 years ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• EC-DIGIT-CSIRC / sysdiagnose
  Forensic toolkit for iOS sysdiagnose feature
  ☆145Updated last week
• puffyCid / macos-loginitems
  A library to parse macOS LoginItems
  ☆15Updated 2 years ago
• ydkhatri / Presentations
  Slides and material from my conference presentations
  ☆14Updated 7 months ago
• objective-see / Mach-O
  A (basic) Mach-O Library
  ☆20Updated 3 years ago
• ydkhatri / spotlight_parser
  Read and extract data from macOS spotlight databases
  ☆104Updated last year
• themittenmac / TrueTree
  A command line tool for pstree-like output on macOS with additional pid capturing capabilities
  ☆245Updated 2 months ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 4 years ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆61Updated 3 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆21Updated 6 years ago
• objective-see / DylibHijackScanner
  Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
  ☆81Updated last year
• ydkhatri / MacForensics
  Scripts to process macOS forensic artifacts
  ☆179Updated 3 months ago
• mnrkbys / ma2tl
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆89Updated last year
• vastlimits / esmat
  macOS Endpoint Security Message Analysis Tool
  ☆44Updated 2 years ago
• 0xmachos / apps-behaving-badly
  List of legitimate macOS apps doing not great things
  ☆35Updated 2 years ago