6 ms·

Red Canary Mac Monitor

176 points by tanelpoder 3y ago

tanelpoder 3y ago
"Mac Monitor is practically the macOS version of the Microsoft Sysinternals tool Procmon."
- wnolens 3y ago
  If true, then I'm in love. Procmon and procexp have saved my ass multiple times over when I was a windows developer.
cmcconomy 3y ago
The website makes it extremely difficult to figure out how to download it; https://redcanary.com/mac-threat-analysis-tool/ https://redcanary.com/mac-threat-analysis-tool/
- krautsourced 3y ago
  I kinda felt the big red 'Download package' button gave it away? Also: `brew install --cask red-canary-mac-monitor`
  - drcongo 3y ago
    I don't have a big red 'Download package' button. The only large red button I see on the submitted article says 'Get a Demo'.
    - krautsourced 3y ago
      Sorry, my mistake, you were referring to the blog post and I was thinking of the product page...
      - deleted 3y ago
        [deleted]
      - drcongo 3y ago
        No worries, I was wondering if we were being A/B tested!
- detrites 3y ago
  Thank you, where did you find that page? I'm still looking. The github at least is linked at the articles end and has this: https://github.com/redcanaryco/mac-monitor/releases https://github.com/redcanaryco/mac-monitor/releases
  - cmcconomy 3y ago
    I clicked the subtle 'Red Canary Mac Monitor' link at the start of their news text. I couldn't find it from their homepage either.
  - mdaniel 3y ago
    Relevant: https://github.com/redcanaryco/mac-monitor#can-you-open-source-mac-monitor https://github.com/redcanaryco/mac-monitor#can-you-open-sour...
  - jhowison 3y ago
    The posting links to the blog post about the tool, but if you click on Mac Monitor at the bottom of the page under Products and Solutions it takes you to the actual page for the tool and that page has the big red download button everyone is talking about..
datavirtue 3y ago
I got excited and clicked the link expecting to see a fancy new display of the same quality as Apple but cheaper. So disappointed.
- currency 3y ago
  In red!
  - tracker1 3y ago
    Could have been from the same company that makes the cameras.
- wffurr 3y ago
  Same. I was looking for an affordable 5k 32" monitor that can actually do 2X scaling properly. A neat tool, but not what "Mac Monitor" brings to mind for me.
  - p1necone 3y ago
    > do 2X scaling properly What do you mean by this? If you're looking for clean pixel doubling/nearest neighbour scaling AMD, NVidia and Intel all support it on the GPU now with driver settings on Windows, but sadly I don't know of any monitors that will do it and I'm not sure what driver support is like on mac.
    - wffurr 3y ago
      With usable screen space. Pixel doubling on a 4k 32” display leaves you with just 1080p effective resolution. Everything is way too big. It would be fine at 24”, but it’s not useful at 32”. At 32” I want 1440p at least.
2c2c2c 3y ago
I got excited hearing the comparison to procmon, misremembering it for process explorer. Is there a mac equivalent to process explorer?
- kbd 3y ago
  Activity Monitor is the closest built-in: https://support.apple.com/guide/activity-monitor/welcome/mac https://support.apple.com/guide/activity-monitor/welcome/mac
- mjmsmith 3y ago
  Activity Monitor will show you all the open files and ports for a process.
- billbrown 3y ago
  Sloth might help - https://sveinbjorn.org/sloth https://sveinbjorn.org/sloth (It's been ages since I used Process Explorer so I'm just going off memory.)
spockz 3y ago
Initially the blog post mentions all kind of analysis that can be done including performance but later on it is mostly about security/threat analysis. Can I use this to find why my programs have such different execution times on two different machines with practically the same hardware? One is stock macOS the other corporate managed.
- saagarjha 3y ago
  You should use a profiler for this.
jasonm23 3y ago
For the HN audience I would expect the GitHub link would be more useful than the .... Whatever that page is supposed to be. https://github.com/redcanaryco/mac-monitor https://github.com/redcanaryco/mac-monitor
syngrog66 3y ago
neither red, nor a canary, nor a monitor, nor a canary monitor

176 points by tanelpoder 3y ago

tanelpoder 3y ago

"Mac Monitor is practically the macOS version of the Microsoft Sysinternals tool Procmon."

wnolens 3y ago
If true, then I'm in love. Procmon and procexp have saved my ass multiple times over when I was a windows developer.

cmcconomy 3y ago

The website makes it extremely difficult to figure out how to download it; https://redcanary.com/mac-threat-analysis-tool/ https://redcanary.com/mac-threat-analysis-tool/

krautsourced 3y ago
I kinda felt the big red 'Download package' button gave it away? Also: `brew install --cask red-canary-mac-monitor`
- drcongo 3y ago
  I don't have a big red 'Download package' button. The only large red button I see on the submitted article says 'Get a Demo'.
  - krautsourced 3y ago
    Sorry, my mistake, you were referring to the blog post and I was thinking of the product page...
    - deleted 3y ago
      [deleted]
    - drcongo 3y ago
      No worries, I was wondering if we were being A/B tested!
detrites 3y ago
Thank you, where did you find that page? I'm still looking. The github at least is linked at the articles end and has this: https://github.com/redcanaryco/mac-monitor/releases https://github.com/redcanaryco/mac-monitor/releases
- cmcconomy 3y ago
  I clicked the subtle 'Red Canary Mac Monitor' link at the start of their news text. I couldn't find it from their homepage either.
- mdaniel 3y ago
  Relevant: https://github.com/redcanaryco/mac-monitor#can-you-open-source-mac-monitor https://github.com/redcanaryco/mac-monitor#can-you-open-sour...
- jhowison 3y ago
  The posting links to the blog post about the tool, but if you click on Mac Monitor at the bottom of the page under Products and Solutions it takes you to the actual page for the tool and that page has the big red download button everyone is talking about..

datavirtue 3y ago

I got excited and clicked the link expecting to see a fancy new display of the same quality as Apple but cheaper. So disappointed.

currency 3y ago
In red!
- tracker1 3y ago
  Could have been from the same company that makes the cameras.
wffurr 3y ago
Same. I was looking for an affordable 5k 32" monitor that can actually do 2X scaling properly. A neat tool, but not what "Mac Monitor" brings to mind for me.
- p1necone 3y ago
  > do 2X scaling properly What do you mean by this? If you're looking for clean pixel doubling/nearest neighbour scaling AMD, NVidia and Intel all support it on the GPU now with driver settings on Windows, but sadly I don't know of any monitors that will do it and I'm not sure what driver support is like on mac.
  - wffurr 3y ago
    With usable screen space. Pixel doubling on a 4k 32” display leaves you with just 1080p effective resolution. Everything is way too big. It would be fine at 24”, but it’s not useful at 32”. At 32” I want 1440p at least.

2c2c2c 3y ago

I got excited hearing the comparison to procmon, misremembering it for process explorer. Is there a mac equivalent to process explorer?

kbd 3y ago
Activity Monitor is the closest built-in: https://support.apple.com/guide/activity-monitor/welcome/mac https://support.apple.com/guide/activity-monitor/welcome/mac
mjmsmith 3y ago
Activity Monitor will show you all the open files and ports for a process.
billbrown 3y ago
Sloth might help - https://sveinbjorn.org/sloth https://sveinbjorn.org/sloth (It's been ages since I used Process Explorer so I'm just going off memory.)

spockz 3y ago

Initially the blog post mentions all kind of analysis that can be done including performance but later on it is mostly about security/threat analysis. Can I use this to find why my programs have such different execution times on two different machines with practically the same hardware? One is stock macOS the other corporate managed.

saagarjha 3y ago
You should use a profiler for this.

jasonm23 3y ago

For the HN audience I would expect the GitHub link would be more useful than the .... Whatever that page is supposed to be. https://github.com/redcanaryco/mac-monitor https://github.com/redcanaryco/mac-monitor

syngrog66 3y ago

neither red, nor a canary, nor a monitor, nor a canary monitor