{"adoption": {"forks": 65, "observed_at": "2026-08-28T04:04:33.694935+00:00", "stars": 1379}, "canonical_url": "https://ross.abutalabs.com/products/mac-monitor", "card": {"archived": false, "artifact_type": "application", "description": "\"The missing ProcMon for macOS\": Mac Monitor records Endpoint Security events and displays them for analysis.", "domain": ["security", "operating-systems", "developer-tools"], "enriched": true, "function": ["monitoring", "security", "logging"], "health_score": 93, "homepage": null, "language": "Swift", "license": "BSD-3-Clause", "license_family": "permissive", "maturity": "active", "member_repos": ["Brandon7CC/mac-monitor"], "name": "Brandon7CC/mac-monitor", "platform": [], "pushed_at": "2026-07-28T20:37:27+00:00", "repo": "Brandon7CC/mac-monitor", "stars": 1379, "tags": ["endpoint-security", "malware-analysis", "process-monitor", "swiftui", "system-extension", "security-research", "macos"], "topics": ["macos", "endpoint-security", "swift", "swiftui"], "urls": [], "use_cases": ["monitor process and file events on macOS like ProcMon", "triage suspected macOS malware", "investigate XPC and interprocess communication", "troubleshoot unexpected system behavior on a Mac", "capture Endpoint Security telemetry for threat hunting", "analyze what a suspicious macOS application does at runtime"], "what_it_is": "Mac Monitor is a stand-alone macOS application that uses Apple's Endpoint Security and System Extension APIs to collect and enrich system events such as process, file, XPC, and interprocess activity. It displays this telemetry graphically to support macOS security research, malware triage, and system troubleshooting.", "when_to_avoid": ["you need monitoring on Linux or Windows", "you cannot grant Full Disk Access or install a System Extension", "you need headless or automated telemetry collection rather than interactive GUI analysis", "you need long-term centralized event storage or SIEM integration"], "when_to_choose": ["you need a ProcMon-equivalent for macOS with a GUI", "you are doing macOS security research or malware analysis", "you want Endpoint Security event collection without writing your own ES client", "you run macOS 13.1+ and want a free, open-source monitoring tool"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/mac-monitor", "repo": "Brandon7CC/mac-monitor", "role": "main", "score": 80}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:33.694935+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:40:16.943529+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "23decf77a27a0e4ff6bd29a9e67e5a8e7174f84719657c0d7dfee9541f9aea89", "fetched_at": "2026-08-28T04:04:33.694935+00:00", "kind": "readme", "missing": false, "url": "https://github.com/Brandon7CC/mac-monitor"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 94, "longevity": 90, "rhythm": 57}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1267, "days_push": 36, "days_rel": 284, "gap_med": 11, "n_releases_24m": 4}, "score": 80, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}