Changes to XProtect and XProtect Remediator in macOS 27 can appear puzzling. And why does it still get MRT from 2022? Plus details of firmware and Recovery systems.
SilentKnight
Three different XProtects, and one of them now duplicated – two sets of data in two locations, updated by two different systems from two different services. Which is which, and what gets updated when.
macOS Sequoia and Tahoe have changed the way Gatekeeper and XProtect are controlled. Can a user disable them, and if so, how? And how can you check whether both are enabled?
Removes superfluous menu commands that could cause crashes, and adds support for auto-update. However, there are currently problems in macOS 27 betas to beware of.
Before the T2, EFI firmware in Intel Macs was complicated. Then simplicity arrived: all Macs running the current version of a supported version of macOS had the same firmware. Not any more they don’t.
A complete guide to using this new version, with explanations of how to keep XProtect up to date, which updates the app will install, and where to get further information.
First full release of SilentKnight designed and optimised for Apple silicon Macs running macOS 15.6 Sequoia or later, including Golden Gate betas. Clean and simple to use, with sophisticated features such as JSON report exporting.
Adds reporting to both text and JSON files, runs from standard user accounts, and fixes several other issues. For Apple silicon Macs only, macOS 15.6 and later.
Completely rewritten using SwiftUI, this now excludes macOS updates from those it downloads and installs, and caters better for Apple silicon Macs running Sequoia and later. Please give it a try and comment.
Two users confronted by a dialog to install command line developer tools so they can use git. Neither wanted to use git, but wondered which app could have triggered it. Despite its protestations, Claude knows only too well.
The Eclectic Light Company 