MFP Interceptor 1.0 review
DownloadMFP Interceptor allows you to see what processes on your Mac OS X computer are making system calls to change things on your disk, in real time, and deny the processes the ability to make these changes.
|
|
MFP Interceptor allows you to see what processes on your Mac OS X computer are making system calls to change things on your disk, in real time, and deny the processes the ability to make these changes.
By "change", I mean add/delete/write; by "see things" I mean by process name, user ID, and by path.
The codename for this project is "interceptor". If you are into this kind of thing and are interested in alpha or beta testing this software, shoot me an e-mail at daver at geeks dot org, or post a comment. You should probably be pretty familiar with the underpinnings of OS X to participate.
There are some sharp caveats to be aware of with this software and some things it'll never do. But I think it's pretty cool, and of course I plan on making the source code available when it's ready. (Would you load a kext into *your* kernel without the source? I wouldn't).
MFP Interceptor 1.0 keywords