Analyze OS X for 3rd party modifications

analyze_mac_3rdpartymodifications.sh

#!/bin/bash

printf "\n\n\e[0;32mKernel Extensions: \e[0m\n\n"
kextstat -kl | awk '!/com\.apple/{printf "%s %s\n", $6, $7}'

printf "\n\n\e[0;32mSystem-wide LaunchItems/Daemons: \e[0m\n\n"
sudo launchctl list | sed 1d | awk '!/0x|com\.(apple|openssh|vix)|edu\.mit|org\.(amavis|apache|cups|isc|ntp|postfix|x)/{print $3}'

printf "\n\n\e[0;32mUser-context LaunchItems/Daemons: \e[0m\n\n"
launchctl list | sed 1d | awk '!/0x|com\.apple|edu\.mit|org\.(x|openbsd)/{print $3}'

printf "\n\n\e[0;32m3rd-Party Filesystem stuff: \e[0m\n\n"
ls -1A /e*/mach* {,/}L*/{Ad,Compon,Ex,Fram,In,Keyb,La,Mail/Bu,P*P,Priv,Qu,Scripti,Servi,Spo,Sta}* L*/Fonts 2> /dev/null

printf "\n\n\e[0;32mLogin Items: \e[0m\n\n"
osascript -e 'tell application "System Events" to get name of every login item' 2> /dev/null