ydkhatri / macOS_FE
Tools for macOS Forensic Bootable media
☆15Updated 4 years ago
Alternatives and similar repositories for macOS_FE
Users that are interested in macOS_FE are comparing it to the libraries listed below
Sorting:
- Slides and material from my conference presentations☆16Updated last year
- Scripts and tools created for appx analysis talk (Magnet summit 2019)☆16Updated last year
- Parser for Sdba memory pool tags☆18Updated 3 years ago
- Python web app for previewing data in a Chrome Profile Folder☆20Updated 10 months ago
- Queries for parsed spotlight database in sqlite☆12Updated 4 years ago
- Collection of tools for processing storage media images☆13Updated 4 months ago
- A small tool to easily mount APFS image on macOS for forensics.☆15Updated 4 years ago
- NTFS file system specimens☆13Updated last year
- A minimal malware analysis sandbox for macOS☆29Updated 2 years ago
- This is a repository for reporting any issues in any of my software☆13Updated 6 years ago
- An efficient tool for extracting files, directories, and alternate data streams directly from NTFS image files.☆21Updated last year
- Just Another broken Registry Parser (JARP)☆16Updated 11 months ago
- Helper scripts to automate the extraction of YARA rules from XProtectRemediators☆20Updated last year
- macOS Artifact Intelligence Tool☆13Updated 6 years ago
- Digital Forensics date and time☆23Updated 4 months ago
- ☆11Updated 6 years ago
- An efficient tool for search files, directories, and alternate data streams directly from NTFS image files.☆26Updated last year
- ☆10Updated last year
- An updated C# port of X-Ways X-Tensions API.☆12Updated 7 years ago
- ☆9Updated 5 years ago
- ☆13Updated 4 years ago
- Indicators of Normality☆12Updated 2 years ago
- extract and parse WEVT_TEMPLATEs from PE files☆18Updated last year
- Parser fo macOS/iOS FSEvents Logs☆33Updated last year
- A simple utility for stripping out either the SHA-1, MD5 or CRC values alone from the NSRL hash database☆14Updated 3 years ago
- ☆12Updated 3 years ago
- Automatic generator of YARA modules based in protocol buffers☆16Updated 3 months ago
- Windows registry samples☆23Updated 6 years ago
- Offline-viewer for registry files☆11Updated 3 weeks ago
- Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework☆20Updated 4 years ago