You can now sponsor KnockKnock/Objective-See Foundation:
KnockKnock v4.1.0
Version 4.1.0: macOS 27 compatibility, hardening, & root support
-
Root: new "always run as root" preference; when elevated, use the
console user's prefs, keychain, login item, appearance, and paths. -
Fix Full Disk Access detection on macOS 27, where the per-user TCC
directory no longer exists (Fixes #52) -
Hardening: uncaught-exception handler, per-plugin scan isolation, guards
for non-regular/oversized files and malformed plist/JSON input, improved
Mach-O parser, no dropped items on JSON serialization failure. -
Launchd: read the live override database, fix inverted enable/disable
logic, domain-aware overrides, treat all triggers as auto-run. -
Improved enumeration for LaunchItems, BTM, DylibInserts, CronJobs, and
browser extensions; better icon extraction and isTrusted checks. -
VirusTotal: improved API key handling; skip remaining lookups once the
quota is exhausted. -
UI improvements, expanded localizations, app category set in
Info.plist.
🔐 KnockKnock_4.1.0.zip
SHA-256: 98EAE6CDA5A7E122E6C7E68622617C00D6533A909F505F002C93DD90941A3F9E