Endpoint Security framework

Named by 2 kept items in this workspace.

Search every workspace for Endpoint Security framework. It matches the name as written, so it can find other things that share it.

The items that name it 2

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
writeup2026-10-30
macOS telemetry source for file modification, LaunchAgent and process events used to detect the chain.
From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
writeup2026-08-07It is written here as Endpoint Security (ES) framework.
Apple's C API for monitoring system events, used to detect Screen Sharing exploitation via ES_EVENT_TYPE_NOTIFY_SCREENSHARING_ATTACH/DETACH and filesystem events

All technologies in this workspace.