
mac-monitor
Advanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
dynamic-analysis-sandboxingeducationforensics+2
1.4k

Advanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…

A cross platform parser for Apple UnifiedLogs!

macos-collector - Automated Collection of macOS Forensic Artifacts for DFIR

Instantly disable Touch ID and lock your Mac with one click or keyboard shortcut.

Patches the zero-click Apple Mail vulnerability (CVE-2020-9922) on macOS, preventing remote code execution without user interaction.

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework.