OSXCollector
A forensic evidence collection and analysis toolkit for macOS, gathering system data to detect and investigate malware infections.
What is OSXCollector?
OSXCollector is a forensic evidence collection and analysis toolkit for macOS. It runs on a potentially infected machine to gather detailed system information—such as startup items, installed applications, browser histories, and file metadata—into a JSON file for investigation. The tool helps security analysts answer questions about malware infections, their origins, and prevention strategies.
Security analysts, incident responders, and forensic investigators who need to collect and analyze evidence from macOS systems during security incidents or malware investigations.
OSXCollector provides a lightweight, dependency-free way to perform comprehensive forensic collection on macOS, with output designed for both manual analysis and integration with automated filtering tools. Its single-file deployment and detailed data gathering make it a practical choice for rapid incident response.
Overview
A forensic evidence collection & analysis toolkit for OS X
Use Cases
Best For
- Collecting forensic evidence from a potentially infected macOS machine
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
