Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.
-
Updated
Dec 14, 2023 - Rust
Nice (ish) bindings for the EndpointSecurity framework on macOS for Rust.
Kernel based auditing for Mac, BSD and Linux. Leverages the Audit Subsystem, OpenBSM (eventually) and Apple's Endpoint Security Framework
A research project exploring how macOS ESF telemetry can be subscribed to, normalised, and ingested into a graph-shaped database for security analysis.
To associate your repository with the endpointsecurityframework topic, visit your repo's landing page and select "manage topics."