Objective-See
26ec32c816
v.1.3.0
...
- improved output (JSON)
- universal build (intel + arm64)
- ui updates (icon, dark mode++)
2020-12-14 20:48:58 -10:00
Patrick Wardle
732a3ca9af
caching, and more!
...
added (process) caching
improved ancestory enumeration
2020-10-14 15:43:02 -10:00
Patrick Wardle
8151b6f083
converted code-signing info to enum
...
enum csOptions{csNone, csStatic, csDynamic};
2020-01-26 10:21:40 -10:00
Patrick Wardle
c28071eed8
add codesigning
...
the codesigning info from the Endpoint Security Framework may be invalid :\
...as such, we manually generate it
2019-12-30 11:44:36 -10:00
Patrick Wardle
f0c5b1423e
v1.2.0: process args
...
process args are only reported in `ES_EVENT_TYPE_NOTIFY_EXEC`
...so capture args here, and report then in all file i/o events :)
-fixed formatting re: cdhash (see: #5 )
2019-11-30 10:08:33 -10:00
Patrick Wardle
c66b93f412
v1.1.1
...
-added timestamp to events
2019-11-28 09:38:08 -10:00
Patrick Wardle
dc0b736804
library now takes user-specified events
...
- `start` method now takes events of interest (vs. hardcoding them)
- improved tokenization of es_string_token_t
- improved handling of `ES_EVENT_TYPE_NOTIFY_CREATE` events
2019-11-27 10:39:16 -10:00
Patrick Wardle
ba787b6830
app build (v1.0.0)
...
packaged as .app
2019-11-10 23:18:43 -06:00