tsale efd7831983 Update macOS telemetry generator documentation and implementation details ...

- Update MACOS_TELEMETRY_GENERATOR_GUIDE.md to reflect OpenDirectory.framework usage for UserAccountEvents instead of direct dslocal plist writes
- Clarify kext load/unload expectations on modern hardened macOS systems
- Revise CodeSignTrust description to focus on signature/trust enrichment validation via trusted vs tampered sample execution
- Update ProcessAccess to document task_for_pid as primary mechanism
- Add recommended

2026-02-12 13:21:08 -08:00

..

__init__.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

codesign_trust.py

Update macOS telemetry generator documentation and implementation details

2026-02-12 13:21:08 -08:00

kext_operations.py

Update macOS telemetry generator documentation and implementation details

2026-02-12 13:21:08 -08:00

launchd_control.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

persistence_launchd.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

persistence_loginitem.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

process_injection.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

service_activity.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

session_activity.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

tcc_operations.py

Added macOS telemetry generator tool and documentation.

2026-01-24 00:08:09 -08:00

user_account_manager.py

Update macOS telemetry generator documentation and implementation details

2026-02-12 13:21:08 -08:00