66 Commits

Author SHA1 Message Date
Patrick Wardle 6987e1a0bd process termination on block (even if ES timeout has fired) 2026-03-12 13:19:32 -07:00
Patrick Wardle 242e002b2a user preference for notarization mode #91 2026-03-12 12:51:37 -07:00
Patrick Wardle 9a27aa793f Improved notarization mode ('all')
#91
2026-03-04 11:07:01 -08:00
Patrick Wardle 3d7d548e7b improved process hierarchy, script handling, etc...
process hierarchy can be built in user session (using carbon APIs)

restored manual script extraction to supplment ES limitations

improved pasteboard heuristics
2026-02-23 22:26:32 -08:00
Patrick Wardle f05e2b55b1 alert improvements (#90)
1. for BTM events, we now use the instigator in the alert (otherwise its just always the BTM daemon)

2. VirusTotal popover now shows links for both instigator and persisted item

3. Signing alert shows signer now, and platform binary correctly too
2026-02-19 20:43:59 -10:00
Patrick Wardle cff555df51 ClickFix++ and additional Settings
Added heuristics for ClickFix detections

Additional Settings:
1. Notarization mode: all (#91)
2. ClickFix heuristics

Note Additional Settings are now shown at install time, allowing for initial configuration
2026-02-19 13:46:57 -10:00
Patrick Wardle 09d8ff21a9 UI tweaks (status bar icon, alert, etc) 2026-02-17 21:23:29 -10:00
Patrick Wardle 15c406b316 make alert floating/top
#94
2026-02-17 15:11:06 -10:00
Patrick Wardle f0afc99b52 enable / disable Paste Protection when BB is enabled/disabled 2026-02-16 11:38:42 -10:00
Patrick Wardle d882555f62 v2.3.1, added simple heuristic for classifying clipboard contents 2026-02-16 11:07:58 -10:00
Patrick Wardle 340dbd001c UI improvements 2026-02-15 18:10:56 -10:00
Patrick Wardle a8d8d7d8cf UI improvements 2026-02-15 17:59:36 -10:00
Patrick Wardle 7e6d6cfe14 Update AppDelegate.m 2026-02-15 15:03:40 -10:00
Patrick Wardle 1212063f34 give Terminal back focus 2026-02-15 14:27:58 -10:00
Patrick Wardle 925178aea7 'Paste Board Protection' mode 2026-02-14 21:13:18 -10:00
Patrick Wardle 975bf4c568 version bump (v2.2.5) 2025-04-23 17:01:06 -10:00
Patrick Wardle aa83b7326a version bump: v2.2.4 2024-09-13 14:53:01 +02:00
Patrick Wardle 371c9ac3dd v2.2.3: performance improvements
added inode caching for performance improvements #10
friends--/++
2024-09-11 22:45:28 +02:00
Patrick Wardle dad9dd8f21 #75
...spelling
2024-03-31 19:45:59 -10:00
Patrick Wardle a3892f4d4c version bump/friends++ 2024-03-21 11:54:16 -10:00
Patrick Wardle 397699c1d0 switched to universal logging
remove old log file #74
switch to os_log_* APIs
2024-03-19 20:12:11 -10:00
Patrick Wardle b60a615a2b v2.2.1
bug fix for #71
2024-01-05 13:57:29 -10:00
Patrick Wardle d2525341ce improved alerting, and (XPC) client authorization
Alerts first bounce dock icon, before being modally shown
For macoS 13+ XPC client authorization now done with setConnectionCodeSigningRequirement
Improved error messages/error alerts
2023-12-17 20:47:14 -10:00
Patrick Wardle 0ef298e754 Update project.pbxproj 2023-12-02 19:10:51 -10:00
Patrick Wardle 442748e179 Improvements to BTM plugin 2023-12-01 21:46:17 -10:00
Patrick Wardle 90dbbdc24d BTM plugin, other improvements
Fixed analyzer issue (#69)
Removed error reporting (#70)
Improved alerts (long pids could wrap)
Refactored project to support multiple watchers
2023-11-26 08:54:34 -10:00
Patrick Wardle c5297257ed Improved plist parsing
Improved plist parsing (#46)
2022-11-10 15:46:53 -10:00
Patrick Wardle de38193393 version bump, etc
Version bump (in app)
Improved icon highlighting
Improved macOS 10.15 compatibility
2022-11-10 15:18:48 -10:00
Patrick Wardle ed7d7b653f v2.1.5
Updated  messaging for #54
Updated 'kext' detection regex (#52)
Updated Friends of Objective-See & Patrons
2022-11-10 12:54:51 -10:00
Patrick Wardle 7e2712e7ae v2.1.4
fix for #39
2022-04-16 14:32:01 -10:00
Patrick Wardle fc1fa56500 improved "is from app store" detection 2022-03-02 21:01:00 -10:00
Patrick Wardle 6129189d0b v2.1.3
improved 'find app bundle' algorithm
notarization mode will now allow iOS/App Store apps
2022-03-02 18:52:39 -10:00
Patrick Wardle ffb6d32ca5 v2.1.2
fix for #34
fix for #36 / #37
2022-03-02 12:30:24 -10:00
Patrick Wardle d273d2bf21 v2.0.1
improved quarantine checks (for notarization mode)
2022-02-23 12:06:10 -10:00
Patrick Wardle 91a6420fd7 v2.1.0
- improved notarization blocking (+quarantine)
- fixed issue on M1 re: ESF timeout for blocking non-notarized processes
- added uninstall option to dropdown menu
2022-02-09 16:25:35 -10:00
Patrick Wardle 9192de6525 v2.0.5
macOS Monterey compatibility
2021-11-01 15:53:28 -07:00
Patrick Wardle b624196806 v2.0.4 2021-06-03 11:16:34 -10:00
Patrick Wardle fbd2abf0c1 allow rules with nil items to be deleted
fix for #27
2021-06-02 21:27:21 -10:00
Patrick Wardle 3e17cb8375 ui improvement (file path not editable)
#20
2021-06-02 12:42:22 -10:00
Patrick Wardle 5b56f0c040 v2.0.3
improved notarization mode
2021-04-12 22:09:10 -10:00
Patrick Wardle 65ee33b108 v2.0.2
improved notarization mode (ignore related alerts, etc.)
2021-04-12 11:57:54 -10:00
Patrick Wardle 4f67278df6 v2.0.1
improved UI message for launch items
bug fixes
2021-04-08 08:51:16 -10:00
Patrick Wardle 6a1419ebbf UI improvements 2021-04-07 18:33:40 -10:00
Patrick Wardle 74021eb131 improve XPC comms/UI 2021-04-07 17:46:01 -10:00
Patrick Wardle 3a415f2060 notarization mode
...when enabled, blocks non-notarized code user-executed code
2021-04-07 17:44:53 -10:00
Patrick Wardle 95b0e2a8a3 v2.0.0 (Initial) checkin
- M1 compatibility
- project cleanup / build
- improved logic for rule deletion
2021-04-04 14:23:49 -10:00
Patrick Wardle 3ed74cb8f2 kext monitoring, and version bump
→kext monitoring
→version bump to v1.1.0
2020-10-19 17:41:09 -10:00
Patrick Wardle 9865af6f7a improved status bar icon, rules window, and bug fixes
-improved status bar icon (#8)
-rules window shows 'no rules' ...if there are no rules
-improved parsing of launch items that have both `Program` and `Program Arguments`
2020-10-19 16:30:56 -10:00
Patrick Wardle b30304ba96 new file monitor library, bug fixes, etc
-wrapped logging in try/catch
-updated Sentry.io (crash reporting) version
-linked against file monitor library that now uses caching
-improved cs checks ("anchor trusted" → "anchor apple generic"), thanks Thijs!
2020-10-14 15:33:48 -10:00
Patrick Wardle 6f5040122a Big Sur Compatibility / Bug Fixes
Big Sur Compatibility (#11)
Bug fixes
2020-10-12 21:14:16 -10:00