How can I get an entitlement for endpoint security

Hello,

I requested entitlement 4 times from 4 days ago. But I did not get any kind of response mail.

I need entitlement for only development, to check file IO events. Is there any way to request entitlement ?

Regards, Daehong

Accepted Reply

You will have to wait for the ES entitlement approval folks to respond to your request. While I’m not involved in that process, my experience is that it takes a lot longer than 4 days.

In the meantime, it’s possible to prototype your solution in two ways:

  • Use the eslogger tool to explore when events are generated.

  • Disable SIP on your test Mac, which allows you to call the ES API without the entitlement [1].

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] In theory that should be the only thing you need to do, but it’s actually more complex. See this post.

Replies

You will have to wait for the ES entitlement approval folks to respond to your request. While I’m not involved in that process, my experience is that it takes a lot longer than 4 days.

In the meantime, it’s possible to prototype your solution in two ways:

  • Use the eslogger tool to explore when events are generated.

  • Disable SIP on your test Mac, which allows you to call the ES API without the entitlement [1].

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] In theory that should be the only thing you need to do, but it’s actually more complex. See this post.