XProtect, XProtect Remediator, XProtect Behaviour Service, kernel extension excludes, incompatible apps, and some historical remnants, including a database that’s downloaded then vanishes.
KEXT
It provided 3 protections when introduced in El Capitan in 2015, and has now grown extensively to cover NVRAM, kernel boot arguments, authentication of root, and even malware scans.
How frequent and large were macOS Sequoia’s updates? How has it grown in total system bundles and apps? Which categories have grown most?
Claimed to block 3rd-party extensions and customisations from loading, check the startup disk, and to clear some system caches. When and why should you use it?
Your Mac unexpectedly restarts, and a little after logging in you see a Panic Alert. Before sending that to Apple, save a copy and follow this guidance, including how to read a panic log.
How the number of bundles in /System/Library has risen from Mojave to Sequoia, and why the last 5 years have been so different from the previous 20.
It’s time to review old kernel extensions, and uninstall those no longer needed. Here’s how to do that, using uninstallers or manually.
Essential details of each of the three types of XProtect data files, how they’re updated, how to update them, and more. Covers new XProtect in macOS 15.x.
Explains the three different settings, including Permissive Security, why you might need to reduce security, and how to do so using Startup Security Utility.
How has the System changed in numbers since Mojave? Why has the number of kernel extensions risen since their deprecation? Why so many Private Frameworks?
The Eclectic Light Company 