• 03 Mar 2023
  • 1 Minute to read
  • Contributors
  • Dark


  • Dark

Article Summary

LimaCharlie's Mac sensor interfaces with the kernel to acquire deep visibility into the host's activity while taking measures to preverse the host's performance. The Mac sensor currently supports all versions of MacOS 10.7 and up.

Installation Instructions

Basic sensor installation instructions can be found here.

Looking for alternative installation methods?

Supported Events

Supported Commands


Given configured paths to collect from, the Mac sensor can batch upload logs / artifacts directly from the host.

Learn more about collecting Artifacts here.


For more complex needs not supported by Events, Artifacts, or Commands, it's possible to execute payloads on hosts via the Mac sensor.

Learn more about executing Payloads here.

Was this article helpful?