AutoMacTC is a modular forensic triage collection framework for macOS that accesses various forensic artifacts, parses them, and presents them in formats suitable for analysis. It can be run against live systems or dead disks, requires Python 3.9 or earlier, and is compatible with macOS major releases 10.11 through 11.2.3 as well as the M1 processor. It supports triage against mounted disk images from macOS 10.11 through 10.15 systems.
Common questions about AutoMacTC including features, pricing, alternatives, and user reviews.
AutoMacTC is Automated Mac Forensic Triage Collector. It is a Security Operations solution designed to help security teams with Triage, Mac Os, Disk Image.
A read-only FUSE driver that enables Linux systems to mount and access Apple File System (APFS) volumes, including encrypted and fusion drives.
DMG2IMG converts Apple compressed DMG archives to standard HFS+ image files supporting zlib, bzip2, and LZFSE compression formats.
OSINT tool for digital identity investigation across 600+ public sources.