AirDrop Monitoring Issue After Sequoia Update – Missing File Detections

We have an application that integrates with the sharingd driver to monitor data transfers via AirDrop. Additionally, we utilize the Endpoint Security API to track file access and application activities.

Prior to the Sequoia update, our solution was effectively detecting and blocking sensitive files sent via AirDrop. However, following the update, our drivers are no longer detecting these file transfers.

Could you confirm if there have been any changes to the Endpoint Security API, sharingd, or any other relevant system components that might be affecting this behavior? Any insights or documentation on recent modifications would be greatly appreciated.

Thanks.

Answered by DTS Engineer in 827105022
Written by HAM08 in 775446021
Could you confirm if there have been any changes … that might be affecting this behavior?

No, sorry, that’s not realistic. The issues you’re hitting falls into a general category of issues discussed in Inferring High-Level Semantics from Low-Level Operations. I recommend that you read that through and follow its advice.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

Written by HAM08 in 775446021
Could you confirm if there have been any changes … that might be affecting this behavior?

No, sorry, that’s not realistic. The issues you’re hitting falls into a general category of issues discussed in Inferring High-Level Semantics from Low-Level Operations. I recommend that you read that through and follow its advice.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

AirDrop Monitoring Issue After Sequoia Update – Missing File Detections
 
 
Q