objective-see/RansomWhere

Stars
64
Rank 464,310 (Top 10 %)
Language
Objective-C
License
GNU General Publi...
Created over 3 years ago
Updated 12 months ago

objective-see/RansomWhere

objective-see

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Generic ransomware detector

LuLu

LuLu is the free macOS firewall

BlockBlock

BlockBlock provides continual protection by monitoring persistence locations.

OverSight

OverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.

ProcInfo

process info/monitoring library for macOS

ProcessMonitor

Process Monitor Library (based on Apple's new Endpoint Security Framework)

KnockKnock

Enumerate persistently installed software

ReiKey

Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!

FileMonitor

File Monitor Library (based on Apple's new Endpoint Security Framework)

DoNotDisturb

Detect Evil Maid Attacks

Netiquette

Network Monitor

WhatsYourSign

WhatsYourSign adds a menu item to Finder.app. Simply right-, or control-click on any file to display its cryptographic signing information!

Malware

macOS Malware Collection

sniffMK

sniff mouse and keyboard events

DNSMonitor

A DNS Monitor, leveraging Apple's NEDNSProxyProvider/Network Extension Framework

DumpBTM

And open-source version of % sfltool dumpbtm

AuRevoir

View and remove notification messages from Apple's "Notification Database"

TaskExplorer

Visually explore all running tasks (processes) ....viewing its signature status, loaded dylibs, open files, network connection, and much more.

DylibHijackScanner

Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

ProcInfoExample

example project, utilizing Proc Info library

fromAppStore

checks if an application is pristine (untampered) and from the official Mac App Store

KextViewr

View all modules on that are loaded in the OS kernel

Mach-O

A (basic) Mach-O Library

objective-see

LockDown

Audits and remediates security configuration settings (El Capitan)

products

Objective-See's Products

Ostiarius

Blocks unsigned internet binaries from executing (El Capitan)