Alternatives and similar repositories for spotlight_queries

Users that are interested in spotlight_queries are comparing it to the libraries listed below

• mac4n6 / FSEventsParser
  Parser fo macOS/iOS FSEvents Logs
  ☆38Updated last year
• cclgroupltd / chrome-profile-view
  Python web app for previewing data in a Chrome Profile Folder
  ☆23Updated last year
• ydkhatri / jarp
  Just Another broken Registry Parser (JARP)
  ☆16Updated last year
• Whee30 / Case-Management-script
  A simple python script to generate nested folders based on user input. The script will also name and place a template report document and…
  ☆11Updated 5 months ago
• dwmetz / Axiom-PowerShell
  PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
  ☆12Updated last year
• nrvana / macOS-triage
  macOS triage is a python script to collect various macOS logs, artifacts, and other data.
  ☆25Updated 4 years ago
• WithSecureLabs / macOSTriageCollectionScript
  A triage data collection script for macOS
  ☆28Updated 5 years ago
• ydkhatri / Appx-Analysis
  Scripts and tools created for appx analysis talk (Magnet summit 2019)
  ☆18Updated last year
• 00010111 / gMetaDataParse
  ☆23Updated 9 months ago
• bradleyjkemp / sigma-esf
  Run Sigma detection rules on logs from the new MacOS EndpointSecurity Framework
  ☆20Updated 4 years ago
• ArsenalRecon / SdbaParser
  Parser for Sdba memory pool tags
  ☆20Updated 4 years ago
• jafarspalace / Crowdstrike-Falcon-Scripts
  Powershell Scripts to work on Crowdstrike Falcon that pull back raw data relevant to forensic investigation
  ☆23Updated 11 months ago
• dfirlabs / ntfs-specimens
  NTFS file system specimens
  ☆13Updated 2 years ago
• mnrkbys / macosac
  Forensic Artifact Collection Tool for macOS
  ☆116Updated 4 months ago
• abrignoni / WLEAPP
  WLEAPP is an open source project that aims to parse Windows OS artifacts for the purpose of triage analysis.
  ☆32Updated 2 years ago
• Beercow / walitean
  ☆11Updated 7 years ago
• EricZimmerman / TLEFilePlugins
  Plugins for parsing CSV files in Timeline Explorer. This project allows for anyone to add more supported files (i,e. they get a Line #/ta…
  ☆28Updated 7 months ago
• mnrkbys / ma2tl
  macOS forensic timeline generator using the analysis result DBs of mac_apt
  ☆93Updated 2 years ago
• zerber0s / mac_int
  macOS Artifact Intelligence Tool
  ☆13Updated 6 years ago
• richiercyrus / Venator-Swift
  Swift Command line tool used for proactive detection of malicious activity on macOS systems.
  ☆68Updated 5 years ago
• bolodev / osxripper
  Tool to rip system and user data from OSX and macOS
  ☆17Updated 3 years ago
• kacos2000 / Win10LiveInfo
  Windows 10 Live Information viewer
  ☆37Updated 3 years ago
• mandiant / ARDvark
  ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
  ☆35Updated 2 years ago
• LincolnLandForensics / HodgePodge
  /ˈhäjˌpäj/ "a confused mixture."
  ☆13Updated last week
• net-protect / google-fs-recover
  Google Filestream Forensic Tool
  ☆21Updated 3 years ago
• Digital-Forensics-Discord-Server / GitHubLearningPlayground
  Fork this repo! Do a Pull Request! As many times as you want! Learn the ins and outs of how to contribute to GitHub! Make your mistakes h…
  ☆14Updated last year
• elastic / sans-dfir-2022
  Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"
  ☆11Updated 10 months ago
• FullTang / AndroidPWList
  A password list optimized for use on Android devices.
  ☆11Updated 3 years ago
• ydkhatri / macOS_FE
  Tools for macOS Forensic Bootable media
  ☆15Updated 5 years ago
• markmckinnon / cLeapp
  Chrome Logs Events and Protobuf Parser
  ☆39Updated 3 years ago