4 ms·
Yeah — not to be an Apple fan boy or anything, but it appears in this case Apple did exactly that: https://support.apple.com/guide/deployment/system-and-kernel-
by mikeocool 2y ago
Yeah — not to be an Apple fan boy or anything, but it appears in this case Apple did exactly that: https://support.apple.com/guide/deployment/system-and-kernel-extensions-in-macos-depa5fb8376f/web https://support.apple.com/guide/deployment/system-and-kernel...
And made APIs available specifically for user-space EDR: https://developer.apple.com/documentation/endpointsecurity https://developer.apple.com/documentation/endpointsecurity
- zokier 2y agoMicrosoft also has userspace APIs available, such as AMSI https://learn.microsoft.com/en-us/windows/win32/amsi/antimalware-scan-interface-portal https://learn.microsoft.com/en-us/windows/win32/amsi/antimal...