15 Commits

Author SHA1 Message Date
Patrick Wardle 9a27aa793f Improved notarization mode ('all')
#91
2026-03-04 11:07:01 -08:00
Patrick Wardle 3d7d548e7b improved process hierarchy, script handling, etc...
process hierarchy can be built in user session (using carbon APIs)

restored manual script extraction to supplment ES limitations

improved pasteboard heuristics
2026-02-23 22:26:32 -08:00
Patrick Wardle f05e2b55b1 alert improvements (#90)
1. for BTM events, we now use the instigator in the alert (otherwise its just always the BTM daemon)

2. VirusTotal popover now shows links for both instigator and persisted item

3. Signing alert shows signer now, and platform binary correctly too
2026-02-19 20:43:59 -10:00
Patrick Wardle b7307b3093 Update signing.m 2026-02-14 21:16:55 -10:00
Patrick Wardle 925178aea7 'Paste Board Protection' mode 2026-02-14 21:13:18 -10:00
Patrick Wardle 0d5e06f999 ES caching, improved message retention, etc
Process Auth Events now cached (#10)
Use of es_retain_message/es_release_message on macOS 11
2024-09-12 19:57:17 +02:00
Patrick Wardle d7155c7c61 Update Process.m 2024-09-11 22:59:10 +02:00
Patrick Wardle 371c9ac3dd v2.2.3: performance improvements
added inode caching for performance improvements #10
friends--/++
2024-09-11 22:45:28 +02:00
Patrick Wardle 90dbbdc24d BTM plugin, other improvements
Fixed analyzer issue (#69)
Removed error reporting (#70)
Improved alerts (long pids could wrap)
Refactored project to support multiple watchers
2023-11-26 08:54:34 -10:00
Patrick Wardle fc1fa56500 improved "is from app store" detection 2022-03-02 21:01:00 -10:00
Patrick Wardle 5b56f0c040 v2.0.3
improved notarization mode
2021-04-12 22:09:10 -10:00
Patrick Wardle 3a415f2060 notarization mode
...when enabled, blocks non-notarized code user-executed code
2021-04-07 17:44:53 -10:00
Patrick Wardle 9865af6f7a improved status bar icon, rules window, and bug fixes
-improved status bar icon (#8)
-rules window shows 'no rules' ...if there are no rules
-improved parsing of launch items that have both `Program` and `Program Arguments`
2020-10-19 16:30:56 -10:00
Patrick Wardle b30304ba96 new file monitor library, bug fixes, etc
-wrapped logging in try/catch
-updated Sentry.io (crash reporting) version
-linked against file monitor library that now uses caching
-improved cs checks ("anchor trusted" → "anchor apple generic"), thanks Thijs!
2020-10-14 15:33:48 -10:00
Patrick Wardle 57ca40fc7f initial checkin
BlockBlock v1.0 (beta)
2020-04-10 21:09:09 -10:00