eslogger
Named by 3 kept items in this workspace.
Search every workspace for eslogger. It matches the name as written, so it can find other things that share it.
The items that name it 3
Consumes events from Apple's Endpoint Security framework; used to capture exec, setextattr, and deleteextattr events for detection/telemetry analysis.
Apple's tool for subscribing to user-specified ES events
Used to supply ES event JSON output (xp_malware_detected) demonstrating XProtect rule enforcement
All technologies in this workspace.