AutoMacTC is a modular forensic triage collection framework for macOS that accesses various forensic artifacts, parses them, and presents them in formats suitable for analysis. It can be run against live systems or dead disks, requires Python 3.9 or earlier, and is compatible with macOS major releases 10.11 through 11.2.3 as well as the M1 processor. It supports triage against mounted disk images from macOS 10.11 through 10.15 systems.
This tool is not verified yet and doesn't have listed features.
Did you submit the verified tool? Sign in to add features.
Are you the author? Claim the tool by clicking the icon above. After claiming, you can add features.
A comprehensive incident response tool for Windows computers, providing advanced memory forensics and access to locked systems.
A script to assist in creating templates for VirtualBox to enhance VM detection evasion.
Web interface for the Volatility Memory Analysis framework with advanced features.
GUI-based memory forensic capture tool for cyber forensics and cyber crime investigation.
Toolkit for performing acquisitions on iOS devices with logical and filesystem acquisition support.
A reliable end-to-end DFIR solution for boosting cyber incident response and forensics capacity.