macOS
brew install --cask crescendolocal Homebrew cask metadata
安装
brew install --cask crescendolocal Homebrew cask metadata
概览
Real time event viewer
历史
Crescendo is an open-source macOS endpoint-security event viewer written in Swift. It displays real-time system events collected by a privileged system extension.
Crescendo was created as a Swift-based real-time event viewer for macOS using Apple's Endpoint Security Framework. The project consists of a system extension, a framework wrapper, and an application that presents captured events.
The initial packaged release announced that Crescendo was ready to monitor activity on a Mac. A subsequent release added daemon-style operation, process blacklisting, event purging, and interface improvements.
Crescendo attracted interest as an open-source example of Apple's Endpoint Security Framework and as a ready-made event viewer. Its repository also exposes a reusable Swift framework and a command-line component for developers investigating the same APIs.
Installation through Homebrew Cask provides a convenient route to the compiled macOS application, although operation still requires approval of its system extension and Full Disk Access.
Move Crescendo to `/Applications`, start it, approve the system extension, and grant the extension Full Disk Access in macOS privacy settings.
The application displays Endpoint Security events for investigation. Its blacklist feature can prevent configured executable paths from launching.
Developers can build the example CLI or embed the framework, but production builds require Apple's endpoint-security entitlement and appropriate signing.
Crescendo is useful both as an endpoint event viewer and as reference code for a macOS security API whose entitlement, signing, system-extension, and privacy requirements make small experiments unusually difficult to package.
Its combination of GUI application, command-line component, framework wrapper, and privileged system extension illustrates the packaging complexity of modern macOS security software.
安全态势
没有找到 crescendo 的匹配本地密钥处理 manifest。软件包元数据仍在此发布,以便未来覆盖拥有稳定的软件包 URL。
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
| 没有可执行文件数据。 | |||
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
https://github.com/SuprHackerSteve/Crescendo
安装元数据
| 软件包键 | cask:crescendo |
|---|---|
| 版本 | 1.0.4 |
| 软件包管理器 | Homebrew Cask |
| 软件包管理器页面 | https://formulae.brew.sh/cask/crescendo |
| 主页 | https://github.com/SuprHackerSteve/Crescendo |
| 仓库 | https://github.com/SuprHackerSteve/Crescendo |
| 源码归档 | https://github.com/SuprHackerSteve/Crescendo/releases/download/v1.0.4/Crescendo.app.zip |
| SHA-256 | 0eebe035b00975002240e7347a45f00291c1d057cf134e5a8cde7ac0f34d0709 |
| Bottle | 未记录 |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | crescendo |
| Names |
|
| Artifacts | |
| Deprecated | no |
| Disabled | no |
来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.