You can now sponsor KnockKnock/Objective-See Foundation:
KnockKnock v4.0.0
☑️ New Feature: "Start at Login"
Once activated, KnockKnock will be automatically started, and perform a scan at each login.
☑️ New Plugin: Shell Configuration Files
Shell configuration files such as ~/.zshrc are parsed each time the shell starts, and any commands they contain are automatically executed. Malware is known to add extra commands to these files to maintain persistence via the shell, which now KnockKnock will display.
☑️ New "Welcome to KnockKnock" screens for initial configuration
On initial launch, KnockKnock will show a configuration screen(s) that lets you choose how it should run. All of these settings can be changed later in the app’s settings:
☑️ Update to VirusTotal v3 API
Updated VirusTotal integration. User's can now specify their own (free!) VT key #31, #39, #17
(See more info on obtaining a free key from VT, see "Please give me an API key").
☑️ Improved command line scan
Myriad of improvements to both CLI scan logic, but also scan output. Special mahalo to Martin!
☑️ Improved menus to better match macOS Guidelines #9
☑️ Improved Full Disk Access check
☑️ Better suggested name for (JSON) output #42
☑️ Whitelisted Apple's (SIP-protected) tmp_cleaner script #40
☑️ Improved "Unrecognized Items" (by VT) window
🔐 KnockKnock_4.0.0.zip
SHA-1: 06387DC135C16E41682BC97B8B497CD65B0FB05D