How can I get an entitlement for endpoint security

Question

daehong_woo OP

Created Feb ’24

Replies 1

Boosts 0

Participants 2

Hello,

I requested entitlement 4 times from 4 days ago. But I did not get any kind of response mail.

I need entitlement for only development, to check file IO events. Is there any way to request entitlement ?

Regards, Daehong

Answered by DTS Engineer in 779740022

You will have to wait for the ES entitlement approval folks to respond to your request. While I’m not involved in that process, my experience is that it takes a lot longer than 4 days.

In the meantime, it’s possible to prototype your solution in two ways:

Use the eslogger tool to explore when events are generated.
Disable SIP on your test Mac, which allows you to call the ES API without the entitlement [1].

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] In theory that should be the only thing you need to do, but it’s actually more complex. See this post.

Boost

Answer 1

DTS Engineer OP

Apple

Feb ’24

Accepted Answer

You will have to wait for the ES entitlement approval folks to respond to your request. While I’m not involved in that process, my experience is that it takes a lot longer than 4 days.

In the meantime, it’s possible to prototype your solution in two ways:

Use the eslogger tool to explore when events are generated.
Disable SIP on your test Mac, which allows you to call the ES API without the entitlement [1].

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] In theory that should be the only thing you need to do, but it’s actually more complex. See this post.

1