8 Commits

Author SHA1 Message Date
Objective-See 26ec32c816 v.1.3.0
- improved output (JSON)
- universal build (intel + arm64)
- ui updates (icon, dark mode++)
2020-12-14 20:48:58 -10:00
Patrick Wardle 732a3ca9af caching, and more!
added (process) caching
improved ancestory enumeration
2020-10-14 15:43:02 -10:00
Patrick Wardle 8151b6f083 converted code-signing info to enum
enum csOptions{csNone, csStatic, csDynamic};
2020-01-26 10:21:40 -10:00
Patrick Wardle c28071eed8 add codesigning
the codesigning info from the Endpoint Security Framework may be invalid :\
...as such, we manually generate it
2019-12-30 11:44:36 -10:00
Patrick Wardle f0c5b1423e v1.2.0: process args
process args are only reported in `ES_EVENT_TYPE_NOTIFY_EXEC`
...so capture args here, and report then in all file i/o events :)

-fixed formatting re: cdhash (see: #5)
2019-11-30 10:08:33 -10:00
Patrick Wardle c66b93f412 v1.1.1
-added timestamp to events
2019-11-28 09:38:08 -10:00
Patrick Wardle dc0b736804 library now takes user-specified events
- `start` method now takes events of interest (vs. hardcoding them)
- improved tokenization of es_string_token_t
- improved handling of `ES_EVENT_TYPE_NOTIFY_CREATE` events
2019-11-27 10:39:16 -10:00
Patrick Wardle ba787b6830 app build (v1.0.0)
packaged as .app
2019-11-10 23:18:43 -06:00