-
What’s new in Endpoint Security
Learn how you can build reliable endpoint security products like anti-virus software, endpoint detection and response, and data leakage prevention solutions for macOS. We'll take you through the latest enhancements to Endpoint Security APIs: Learn how you can support more security events and use advanced muting capabilities in your app. We'll also explore a standalone tool to help you perform introspection from the command line.
Ressources
Vidéos connexes
WWDC20
WWDC19
-
Rechercher dans cette vidéo…
-
-
4:29 - Target path muting
// Mute events operating on /var/log es_mute_path(client, "/private/var/log", ES_MUTE_PATH_TYPE_TARGET_PREFIX) // Mute write events to /dev/null var events = [ ES_EVENT_TYPE_NOTIFY_WRITE ] es_mute_path_events(client, "/dev/null", ES_MUTE_PATH_TYPE_TARGET_LITERAL, &events, events.count) -
5:08 - Mute inversion
// Invert muting for target paths es_invert_muting(client, ES_MUTE_INVERSION_TYPE_TARGET_PATH) // Select only events pertaining to /Library/LaunchDaemons es_unmute_all_target_paths(client) es_mute_path(client, "/Library/LaunchDaemons", ES_MUTE_PATH_TYPE_TARGET_PREFIX) -
8:08 - Use eslogger to observe ssh login and logout events
sudo eslogger openssh_login openssh_logout >out.jsonl
-