willyu-elastic / SimpleEndpoint

Related projects: ⓘ

• gyunaev / macprocmon
  MacOS X process monitor using EndpointSecurity extension.
  ☆33Updated 3 years ago
• slavaim / mac-notes
  macOS notes
  ☆113Updated 4 years ago
• slavaim / MacOSX-IOKit-Hooker
  A macOS IOKit objects hooker
  ☆86Updated 7 years ago
• gdbinit / can_I_suid
  A TrustedBSD module to control execution of binaries with suid bit set
  ☆37Updated 9 years ago
• Omar-Ikram / EndpointSecurityDemo
  This is a complete Xcode project of the Endpoint Security Demo gist: https://gist.github.com/Omar-Ikram/8e6721d8e83a3da69b31d4c2612a68ba
  ☆19Updated 2 years ago
• CylanceVulnResearch / osx_runbin
  ☆64Updated last year
• slavaim / MacOSX-VFS-redirector
  Mac OS X file system filter to redirect file operations
  ☆40Updated 6 years ago
• axelexic / CSOps
  Utility to manipulate codesigned application in Mac OS X. Demonstrate the use of csops system call.
  ☆69Updated 5 months ago
• slavaim / MacOSX-FileSystem-Filter
  A file system filter for Mac OS X
  ☆97Updated 7 years ago
• knightsc / Tracer
  macOS application that makes use of the EndpointSecurity framework
  ☆18Updated 5 years ago
• slavaim / MacOSX-VFS-Isolation-Filter
  A MacOS VFS isolation layer to redirect file I/O operations.
  ☆28Updated 6 years ago
• knightsc / osx_and_ios_kernel_programming
  Updated sample code for OS X and iOS Kernel Programming book
  ☆34Updated 5 years ago
• wrfsh / sysent_hook
  Mac OS X syscall hook kext
  ☆22Updated 8 years ago
• knightsc / XProtect
  macOS XProtect definition files
  ☆38Updated 2 years ago
• slavaim / MacOSX-Network-Sockets-Filter
  A MacOS network kernel extension filter for IPv4/IPv6 sockets.
  ☆74Updated 7 years ago
• ConradSun / NuwaStone
  A macOS behavior audit / event monitoring system with scope of file, process and network events (based on Endpoint Security Framework).
  ☆44Updated 3 months ago
• cocoahuke / mackextdump
  Dump Kext information from Macos. Support batch analysis. The disassembly framework used is Capstone
  ☆43Updated 7 years ago
• AloneMonkey / MacKext
  Learn MacOS kernel extensions
  ☆45Updated 6 years ago
• jzdziarski / kernelresolver
  macOS Private KPI Symbol Resolver
  ☆49Updated 7 years ago
• steven-michaud / SandboxMirror
  Tool for reverse-engineering Apple's sandbox
  ☆54Updated 7 years ago
• bazad / threadexec
  A library to execute code in the context of other processes on iOS 11.
  ☆80Updated 6 years ago
• slavaim / MacOSX-SparseFile-KernelMode
  A B-Tree sparse file implementation for kernel mode IOKit modules/extensions.
  ☆15Updated 7 years ago
• xpn / DyldDeNeuralyzer
  ☆88Updated last year
• ChiChou / TuttiFrutti
  ☆18Updated this week
• WithSecureLabs / ESFang
  ESF modular ingestion tool for development and research.
  ☆33Updated 2 years ago
• AlfredoAbarca / OSXMon
  OSX Events Monitor
  ☆21Updated 5 years ago
• knightsc / EndpointSecurity
  A module to expose the Endpoint Security library to Swift
  ☆20Updated 5 years ago
• lyq1996 / X-Monitor
  X-Monitor is an open-source, extensible event monitoring tool for macOS that provides security professionals with the ability to perform …
  ☆17Updated 4 months ago
• knightsc / CVE
  A collection of CVE POC code
  ☆11Updated 4 years ago
• quarkslab / LLDBagility
  A tool for debugging macOS virtual machines
  ☆107Updated 4 years ago