ydkhatri / PresentationsLinks
Slides and material from my conference presentations
☆16Updated last year
Alternatives and similar repositories for Presentations
Users that are interested in Presentations are comparing it to the libraries listed below
Sorting:
- Tools for macOS Forensic Bootable media☆14Updated 5 years ago
- Use "Full Disk Access" permissions to read the contents of TCC.db and display it in human-readable format☆40Updated 4 years ago
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆19Updated last year
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆22Updated last year
- Forensic Artifact Collection Tool for macOS☆116Updated 5 months ago
- ☆33Updated last year
- A minimal malware analysis sandbox for macOS☆34Updated 2 years ago
- Swift Command line tool used for proactive detection of malicious activity on macOS systems.☆68Updated 5 years ago
- Parser fo macOS/iOS FSEvents Logs☆40Updated last year
- machofile is a module to parse Mach-O binary files☆90Updated 5 months ago
- Automatically exported from code.google.com/p/mac-osx-forensics☆28Updated 9 years ago
- Collection of tools for processing storage media images☆14Updated 2 weeks ago
- Discover which process execute a hunted binary inside macOS☆27Updated 4 years ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆21Updated 4 years ago
- Norimaci is a simple and lightweight malware analysis sandbox for macOS☆70Updated 5 years ago
- A small tool to easily mount APFS image on macOS for forensics.☆16Updated 5 years ago
- macOS Endpoint Security Message Analysis Tool☆47Updated 3 years ago
- Swift implementation of in-memory Mach-O loading on macOS☆68Updated 3 years ago
- A triage data collection script for macOS☆28Updated 5 years ago
- macOS Artifact Intelligence Tool☆13Updated 6 years ago
- Software installation scripts for macOS systems that allows you to setup a Virtual Machine (VM) for reverse engineering macOS malware☆38Updated 6 months ago
- Queries for parsed spotlight database in sqlite☆12Updated 5 years ago
- ESF modular ingestion tool for development and research.☆37Updated 4 years ago
- macOS forensic timeline generator using the analysis result DBs of mac_apt☆93Updated 2 years ago
- A parser for Unified logging tracev3 files☆95Updated 5 months ago
- JXA script based on research by Jeff Johnson on leveraging TextEdit to remove quarantine attributes on files. Jeff's original research is…☆17Updated 4 years ago
- The Art of Mac Malware☆61Updated last month
- ObjectiveC CLI tool for interacting with macOS Keychain☆81Updated 3 years ago
- ☆35Updated 7 years ago
- NTFS Security Descriptor Stream ($Secure:$SDS) parser☆14Updated 2 years ago