sinter
sinter copied to clipboard
trailofbits
A user-mode application authorization system for MacOS written in Swift
It's one thing to notify the user (or outright block a process launch) when a code signature is broken, but it would also be nice to notify the user, when...
It would be great to somehow configure sinter to execute shell scripts when apps with specified bundle IDs launch (or processes from a certain path): sinter would halt the app/process...
The Endpoint Security Framework includes process agruments as [es_exec_arg](https://developer.apple.com/documentation/endpointsecurity/3259701-es_exec_arg?language=swift) which can be extracted as shown [here (Objective-C)](https://github.com/objective-see/ProcessMonitor/blob/9309f85213c81a93f6f367309d76292f6607cb95/Library/Source/Process.m#L186). It would be very helpful to include these process arguments in the sinter...
I love .json as much as the next person but being able to set the config.json settings and add rules via an MDM profile would be awesome. Ultimately, I'm lazy,...
Sinter has the system extension entitlement in its provisioning profile.
### Why As a security engineer, I want to be able to approve or deny processes by signing certificate so that our team can gate the approval of multiple processes...
Metadata
Owner
Metadata
A user-mode application authorization system for MacOS written in Swift