SuprHackerSteve/Crescendo

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1077 stars · 69 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Crescendo is a Swift-based real-time event viewer for macOS built on Apple's Endpoint Security Framework. It consists of a system extension, a Swift framework wrapper around ESF, and a GUI app for viewing process and file system events.

Use cases

• monitor file system and process events on macOS in real time
• investigate what processes are doing on my Mac
• explore Apple's Endpoint Security Framework with a working example
• view endpoint security events in a GUI instead of the console
• build a Swift app that uses the Endpoint Security Framework

When to choose

• you need a native macOS GUI for real-time endpoint security events
• you want a reference implementation for Apple's Endpoint Security Framework in Swift
• you're doing security research or incident triage on macOS 10.15+

When to avoid

• you need cross-platform endpoint monitoring (macOS only)
• you need a production-grade EDR with alerting and persistence
• you can't disable SIP/AMFI or obtain Apple's endpoint-security entitlement for development
• you need long-term maintained software - the last release was 2021

Facets

application · maturity maintenance

monitoring security logging gui security monitoring apple-ecosystem developer-tools endpoint-security event-viewer system-extension macos-security process-monitoring file-monitoring macos swift

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SuprHackerSteve/Crescendo")