Skip to content

Apple Endpoint Security API

Named by 2 kept items in this workspace.

Search every workspace for Apple Endpoint Security API. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Deceptive Installers: How Fake Apps Target macOS
    writeup2026-06-10It is written here as Apple Endpoint Security API (ES).

    Provides telemetry including the 'mount' event and es_mount_disposition_t enum (e.g. VIRTUAL) used by Huntress to detect virtual disk image mounts at /Volumes

  • Cross-Platform Unity in EDR
    article2026-01-13

    Apple's API used by security software (via a system extension) to listen to and take action on low-level process events on macOS, in 'notify' (audit) or 'auth' (block) mode

All technologies in this workspace.