Alternatives and similar repositories for presentations

Users that are interested in presentations are comparing it to the libraries listed below

• richiercyrus / Venator
  [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.
  ☆177Updated 4 years ago
• cedowens / MacShellSwift
  Proof of concept MacOS post exploitation tool written in Swift. Designed as a POC for blue teams to build macOS detections. Author: Cedri…
  ☆121Updated 4 years ago
• ThisIsLibra / genesis
  A framework to generate unique test cases based on code snippets to test techniques
  ☆56Updated 4 years ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 4 years ago
• malware-unicorn / MacOS_VBA_Macro
  Example VBA Macro for MacOS Mojave
  ☆67Updated 6 years ago
• Neo23x0 / littlesnitch-log-exporter
  LittleSnitch Log Statistics Exporter
  ☆33Updated 2 years ago
• cedowens / Mythic-Macro-Generator
  Python3 script to generate a macro to launch a Mythic payload. Author: Cedric Owens
  ☆47Updated 4 years ago
• W3ndige / aurora
  Malware similarity platform with modularity in mind.
  ☆78Updated 3 years ago
• thomasareed / pict
  Post-Infection Collection Toolkit
  ☆95Updated 2 years ago
• nicoleibrahim / DSStoreParser
  macOS .DS_Store Parser
  ☆66Updated 3 years ago
• MythicAgents / typhon
  Payload designed for targeting Jamf enrolled devices.
  ☆38Updated last year
• pstirparo / machofile
  machofile is a module to parse Mach-O binary files
  ☆51Updated last year
• jbradley89 / osx_incident_response_scripting_and_analysis
  Scripts from my book OS X Incident Response Scripting and Analysis -> https://www.amazon.com/dp/012804456X/ref=cm_sw_r_tw_dp_U_x_fQeLAb68…
  ☆49Updated 8 years ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆35Updated last year
• cedowens / EntitlementCheck
  Scripts (python3 and Swift) for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binar…
  ☆97Updated 2 years ago
• swimlane / PSAttck
  PSAttck is a light-weight framework for the MITRE ATT&CK Framework.
  ☆38Updated 3 years ago
• XMCyber / MacHound
  ☆98Updated 4 years ago
• bradleyjkemp / threathunting
  Assorted, MIT licensed, threat hunting rules from @bradleyjkemp
  ☆13Updated 3 years ago
• its-a-feature / HealthInspector
  JXA situational awareness helper by simply reading specific files on a filesystem
  ☆78Updated 3 years ago
• Neo23x0 / xorex
  XOR Key Extractor
  ☆50Updated 9 months ago
• antman1p / freyja
  Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.
  ☆42Updated 6 months ago
• mubix / ctf
  Capture The Flag Information
  ☆12Updated 6 years ago
• lwangenheim / PW_Spy
  ☆27Updated 4 years ago
• slyd0g / SwiftParseTCC
  Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format
  ☆39Updated 3 years ago
• cedowens / Swift-Attack
  Unit tests for blue teams to aid with building detections for some common macOS post exploitation methods.
  ☆107Updated 2 years ago
• Big5-sec / SourceFu
  hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…
  ☆40Updated 5 years ago
• cmc / eastwood
  newly registered domain name/brand infringement detector
  ☆22Updated 3 years ago
• evild3ad / isodump
  isodump - ISO dump utility
  ☆40Updated 5 years ago
• mvelazc0 / PurpleSpray
  PurpleSpray is an adversary simulation tool that executes password spray behavior under different scenarios and conditions with the purpo…
  ☆51Updated 5 years ago
• mubix / attackbox
  Ansible scripts to build an attack box
  ☆23Updated 6 years ago