SuprHackerSteve/Crescendo

Whitelisting/blacklisting support

SuprHackerSteve opened this issue · 3 comments

As a user, I'd like the ability to whitelist or blacklist process execution events on my mac using Crescendo.

Do you mean, prevent them from occurring a la Google's Santa?

@ideologysec I'm not familiar with the feature set of Google's Santa, but it will just block a process from launching.

Awesome.

Looks like Santa is in fact using a SysExt on 10.15+, possibly a decent starting point?

https://github.com/google/santa