Information Security Research & Defense

OSX Autoruns

osxautoruns is a python-based, Mac OS X utility that displays items set to auto-launch at either system boot or user login.

License: GPLv3

DOWNLOAD

Fsdiff Tool

Python proof-of-concept fslogger-csv log parser. The script takes an fslogger-csv log file as input and produces a formatted list of all files created, modified, and deleted.

DOWNLOAD

Modified Fslogger Tool (fslogger-csv)

Fslogger-csv is a filesystem event collection tool that produces a CSV style log of filesystem events. This tool is a slightly modified version of Amit Singh’s fslogger tool. Amit created fslogger as a proof-of-concept tool to show concepts covered in his book Mac OS X Internals. The original source and fslogger-csv.c have been released under the GPLv2.

DOWNLOAD

MS Windows .LNK Parser

Python script for extracting the various data elements contained within MS Windows .lnk files. This tool can be used for examining windows shortcut files and recent documents entries.

License: GPLv3

DOWNLOAD