OSX Collector
A forensic evidence collection and analysis toolkit for macOS, gathering system data to investigate potential infections.
What is OSX Collector?
OSXCollector is a forensic evidence collection and analysis toolkit for macOS. It helps security analysts investigate potentially infected machines by gathering comprehensive system data—including file metadata, browser histories, startup items, and user accounts—into a structured JSON output. The tool is designed to answer critical questions about malware presence, infection vectors, and prevention strategies.
Security analysts, incident responders, and forensic investigators who need to collect and analyze evidence from macOS systems during security incidents or malware investigations.
Developers choose OSXCollector for its simplicity and effectiveness: it's a single-file Python script with zero dependencies, making it easy to run on any macOS system, and it produces detailed, actionable forensic data that integrates with automated analysis pipelines.
Overview
A forensic evidence collection & analysis toolkit for OS X
Use Cases
Best For
- Investigating suspected malware infections on macOS
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
