thomasareed / presentations
☆24Updated 4 years ago
Related projects ⓘ
Alternatives and complementary repositories for presentations
- JavaScript for Automation (JXA) version of Patrick Wardle's tool that searches applications for dylib hijacking opportunities☆20Updated 5 years ago
- A framework to generate unique test cases based on code snippets to test techniques☆56Updated 3 years ago
- [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.☆176Updated 4 years ago
- JXA situational awareness helper by simply reading specific files on a filesystem☆68Updated 2 years ago
- Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…☆116Updated 3 years ago
- ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.☆34Updated last year
- Payload designed for targeting Jamf enrolled devices.☆36Updated last year
- LittleSnitch Log Statistics Exporter☆34Updated last year
- macOS .DS_Store Parser☆61Updated 3 years ago
- Scripts for MacOS related tasks.☆17Updated 4 years ago
- A YARA Rule Performance Measurement Tool☆58Updated 8 months ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆68Updated 4 years ago
- Assorted, MIT licensed, threat hunting rules from @bradleyjkemp☆12Updated 2 years ago
- Post-Infection Collection Toolkit☆93Updated last year
- Challenges for the TheManyHatsClub CTF☆11Updated last year
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆89Updated last year
- Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…☆49Updated 8 years ago
- isodump - ISO dump utility☆39Updated 5 years ago
- A triage data collection script for macOS☆26Updated 3 years ago
- Malware similarity platform with modularity in mind.☆76Updated 3 years ago
- Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.☆104Updated 2 years ago
- Catalog Red Team techniques that cause popups in various macOS versions☆14Updated this week
- newly registered domain name/brand infringement detector☆23Updated 2 years ago
- ☆27Updated 4 years ago
- Slackhound allows red and blue teams to perform fast reconnaissance on Slack workspaces/organizations to quickly search user profiles, lo…☆74Updated 9 months ago
- ☆76Updated 6 years ago