Kyeongsik Lee

chainbreaker. Mac OS X Keychain Forensic Tool

volafox. Mac OS X Memory Analysis Toolkit

iChainbreaker. Breaking the iCloud Keychain Artifacts

walitean. Python

OS-X-Continuity. Script for forensic analysis of the OS X Continuity

raw. Python

mac-osx-forensics. Mac osx forensics tools

keychaindump. A proof-of-concept tool for reading OS X keychain passwords

OSX-QuickLook-Parser. Parse the Mac Quickook index.sqlite database

contents.

macosx_book.

idapython. Python

utmpxparser. Unix/Linux/OS X Login Session Parser