APFS is a proprietary file system developed by Apple for macOS, offering improved performance, security, and reliability.
#macos tools
18 results
Automated Mac Forensic Triage Collector
Semi-tethered jailbreak for iPhone 5s to iPhone X, running iOS 12.0 and up, using the 'checkm8' bootrom exploit.
CyLR is a Live Response Collection tool for quickly and securely collecting forensic artifacts from hosts with NTFS file systems.
A DICOM server with a twist, blocking C-STORE attempts for protection but logging them.
A free, open-source tool that uncovers persistently installed software on macOS, helping to generically reveal malware.
Dump the contents of the location database files on iOS and macOS with output options like KML and CSV.
A collection of Mac OS X and iOS forensics resources with a focus on artifact collection and collaboration.
Python script to parse macOS MRU plist files into human-friendly format
mac_apt is a versatile DFIR tool for processing Mac and iOS images, offering extensive artifact extraction capabilities and cross-platform support.
A vulnerability management tool for macOS that monitors and detects vulnerabilities in over 100 apps.
A macOS Initial Access Payload Generator for penetration testing and red teaming exercises.
Open Backup Extractor is an open source program for extracting data from iPhone and iPad backups.
Open-source tool for monitoring macOS hosts with detailed system activity insights.
Modular Threat Hunting Tool & Framework
Santa is a binary and file access authorization system for macOS.
Stronghold is the easiest way to securely configure your Mac.
An endpoint monitoring tool for Linux and macOS that reports file, socket, and process events to Zeek.