
machscope
macOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool
binary-analysisdigital-forensicsforensics+7
11 month ago

macOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool


Windows memory forensics tool for dumping files from process memory regions, searching byte patterns (PDF, JPG, SWF), and performing live process…