KnockKnock
Enumerate persistently installed software
There are no reviews yet. Be the first to send feedback to the community and the maintainers!
LuLu
LuLu is the free macOS firewallBlockBlock
BlockBlock provides continual protection by monitoring persistence locations.OverSight
OverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.ProcessMonitor
Process Monitor Library (based on Apple's new Endpoint Security Framework)ProcInfo
process info/monitoring library for macOSReiKey
Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps!FileMonitor
File Monitor Library (based on Apple's new Endpoint Security Framework)Netiquette
Network MonitorMalware
macOS Malware CollectionDoNotDisturb
Detect Evil Maid AttacksWhatsYourSign
WhatsYourSign adds a menu item to Finder.app. Simply right-, or control-click on any file to display its cryptographic signing information!sniffMK
sniff mouse and keyboard eventsDNSMonitor
A DNS Monitor, leveraging Apple's NEDNSProxyProvider/Network Extension FrameworkDumpBTM
And open-source version of % sfltool dumpbtmAuRevoir
View and remove notification messages from Apple's "Notification Database"TaskExplorer
Visually explore all running tasks (processes) ....viewing its signature status, loaded dylibs, open files, network connection, and much more.DylibHijackScanner
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.RansomWhere
Generic ransomware detectorfromAppStore
checks if an application is pristine (untampered) and from the official Mac App StoreProcInfoExample
example project, utilizing Proc Info libraryKextViewr
View all modules on that are loaded in the OS kernelobjective-see
TAOMM
The Art of Mac MalwareMach-O
A (basic) Mach-O LibraryLockDown
Audits and remediates security configuration settings (El Capitan)products
Objective-See's ProductsOstiarius
Blocks unsigned internet binaries from executing (El Capitan)Love Open Source and this site? Check out how you can help us