Samples of four malicious software downloaded and run on macOS 13.1. Could it detect and block them effectively? Or do you need 3rd party protection?
Gatekeeper
It’s well over 4 years since Apple introduced notarization, but many executables still aren’t properly signed, and require the user to bypass Gatekeeper.
Download some vital free software, mount its disk image, run the Installer package there – but why does Ventura refuse to install it, and what you do?
From AppleKextExcludeList to XProtect Remediator, what’s where, its current version, and which have fallen into disuse.
Developed from LockRattler three years ago, SilentKnight is in need to modernisation to work better with changing security tools. History and aims.
What and where is the Gatekeeper app or service? The answer is that it’s a collaborative system or technology to check apps and ensure that only trusted software is run.
What should you do when Gatekeeper refuses to let you run a newly installed app? How human paradoxical behaviour makes us do the wrong things.
Checks on app signatures and notarization of notarized apps will be performed each time they’re run. How to deal with problems, and what not to do.
There’s more to the quarantine flag, as it’s not binary on/off, and app translocation can trap even notarized applications if you don’t move them right.
Is macOS going to be like iOS? Not in Ventura, where notarization is improved with additional security checks. Here are the details.
The Eclectic Light Company 