Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
47,133 repositories indexed
25–38 of 38 · Most stars
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
A secure password manager for macOS,Linux and Windows platforms
Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices
macOS persistence tool
A Highly Accessible and Automated Virtualization Platform for Security Education
Swift cross-platform crypto library using CommonCrypto/libcrypto
simple YARA-based IOC scanner
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
Native WebAuthn/Passkey support for Electron on macOS using Apple's AuthenticationServices framework
Convert MacOS plist password file to hash file for password crackers
IOS/MAC Denial-Of-Service [POC/EXPLOIT FOR MASSIVE ATTACK TO IOS/MAC IN NETWORK]