OSXAuditor
A free Mac OS X computer forensics tool that parses system artifacts, extracts user data, and verifies file reputation.
What is OSXAuditor?
OS X Auditor is a forensic analysis tool for Mac OS X that parses system artifacts, extracts user data from browsers and applications, and checks file reputations against security services. It helps investigators collect evidence from live systems or disk images by analyzing a comprehensive set of forensic artifacts.
Digital forensic analysts, incident responders, and security researchers investigating Mac OS X systems for security incidents or compliance audits.
It provides a free, scriptable tool specifically for Mac forensics with extensive artifact coverage, multiple output formats, and integration with threat intelligence services like VirusTotal.
Overview
OS X Auditor is a free Mac OS X computer forensics tool
Use Cases
Best For
- Investigating security incidents on Mac OS X systems
- Collecting browser history and download artifacts for forensic analysis
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
