macnoise

MacNoise MacNoise 生成真实的 macOS 遥测数据：网络连接、文件写入、进程派生、plist 变更、TCC 探测等。将其指向运行 EDR、SIEM 或防火墙栈的机器，观察实际触发的行为——而非厂商数据表所声称会触发的行为。 关于动机和设计的背景，请参阅发布博客文章。 快速开始 Build add build-amd64 / build-arm64 to cross-compile for Darwin, or release for both make build List available modules ./macnoise list Run a single...

macnoise v0.5.0

MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...