Are there any plans to add camera-access or camera-activation events to EndpointSecurity.framework, so security products (like SIEM/EDR) can reliably detect when applications start or stop using the camera without relying on private APIs or log monitoring?
We can’t discuss our future plans. Please file a feedback request so our engineering teams can hear more about your needs.
Thank you for the suggestion. We have already submitted feedback through Feedback Assistant (FB10287547). We are posting here to seek additional guidance on any supported solutions, recommended approaches, or future platform direction for enterprise security products that need to manage camera access authorization (or at least notifications).
