Contents x
    macOS
    • 13 Aug 2024
    • 1 Minute to read
    • Contributors
    • Print
    • Dark
      Light
    Contents
      This documentation version is deprecated, please click here for the latest version.

    macOS

    • Updated on 13 Aug 2024
    • 1 Minute to read
    • Contributors
    • Print
    • Dark
      Light
    Article summary

    LimaCharlie's Mac sensor interfaces with the kernel to acquire deep visibility into the host's activity while taking measures to preverse the host's performance. The Mac sensor currently supports all versions of MacOS 10.7 and up.

    Installation Instructions

    Basic sensor installation instructions can be found here.

    Looking for alternative installation methods?

    Supported Events

    Supported Commands

    Artifacts

    Given configured paths to collect from, the Mac sensor can batch upload logs / artifacts directly from the host.

    Learn more about collecting Artifacts here.

    Payloads

    For more complex needs not supported by Events, Artifacts, or Commands, it's possible to execute payloads on hosts via the Mac sensor.

    Learn more about executing Payloads here.

    Was this article helpful?
    What's Next