ProcessMonitor

Process Monitor Library (based on Apple's new Endpoint Security Framework)

<p align="center"><img src="https://objective-see.com/images/blog/blog_0x47/twitter.png"></p>

It captures process start, fork, and exit events, providing:

• pid
• path
• ancestory
• arguments
• environment variables
• code-signing information

Read More:
For more details read: "Writing a Process Monitor with Apple's Endpoint Security Framework".

To Support:
❤  Love this product or want to support it? Please check out my patreon page :)

<p align="center"> <a class="inlineLink" href="https://www.patreon.com/objective_see"> <img src="https://objective-see.com/patreon/images/patreon.jpg" width="700" style="display:block; margin:auto;"/> </a> </p>

Mahalo!
This product is supported by the following "Friends of Objective-See": <br> 🥇CleanMyMac X <br> 🥈Malwarebytes / Airo AV <br> 🥉SmugMug / Guardian Mobile Firewall / SecureMac / Sophos / SentinelOne / Digital Guardian / Trail of Bits / CyberArk / Halo Privacy