Apple's own endpoint sensor, without an external agent
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
The author investigates whether Apple's own Endpoint Security framework on macOS can serve as a monitoring sensor without installing a third-party agent. Writing from the view of a security engineer protecting a personal MacBook that holds sensitive work and private data, the piece weighs commercial EDR platforms, antivirus products, and…