15 Commits

Author SHA1 Message Date
Patrick Wardle a00f92a013 notarization, iOS app store checks 2022-03-02 20:52:24 -10:00
Objective-See 0b431395a7 architecture / rpid (via ESF)
-report process architecture
-report rpid (via ESF, v4+)
2020-12-16 12:10:54 -10:00
Objective-See dd96f1edb2 Update signing.m
...now uses process auth token (instead of pid) for dynamic checks
2020-12-16 12:04:47 -10:00
Objective-See 26ec32c816 v.1.3.0
- improved output (JSON)
- universal build (intel + arm64)
- ui updates (icon, dark mode++)
2020-12-14 20:48:58 -10:00
Patrick Wardle 732a3ca9af caching, and more!
added (process) caching
improved ancestory enumeration
2020-10-14 15:43:02 -10:00
Patrick Wardle f6f4189ca2 code/output cleanup 2020-01-26 11:54:41 -10:00
Patrick Wardle 8151b6f083 converted code-signing info to enum
enum csOptions{csNone, csStatic, csDynamic};
2020-01-26 10:21:40 -10:00
Patrick Wardle c28071eed8 add codesigning
the codesigning info from the Endpoint Security Framework may be invalid :\
...as such, we manually generate it
2019-12-30 11:44:36 -10:00
Patrick Wardle f0c5b1423e v1.2.0: process args
process args are only reported in `ES_EVENT_TYPE_NOTIFY_EXEC`
...so capture args here, and report then in all file i/o events :)

-fixed formatting re: cdhash (see: #5)
2019-11-30 10:08:33 -10:00
Patrick Wardle c66b93f412 v1.1.1
-added timestamp to events
2019-11-28 09:38:08 -10:00
Patrick Wardle 3b0e03b1e3 version bump (v1.1.0) 2019-11-27 10:48:57 -10:00
Patrick Wardle dc0b736804 library now takes user-specified events
- `start` method now takes events of interest (vs. hardcoding them)
- improved tokenization of es_string_token_t
- improved handling of `ES_EVENT_TYPE_NOTIFY_CREATE` events
2019-11-27 10:39:16 -10:00
Patrick Wardle 2b2781215e project cleanup
removed unneeded Base.lproj (fix for #3)
2019-11-11 10:52:16 -06:00
Patrick Wardle bf1431a857 project cleanup 2019-11-11 10:34:53 -06:00
Patrick Wardle ba787b6830 app build (v1.0.0)
packaged as .app
2019-11-10 23:18:43 -06:00