🧑🏻‍💻   The source code for our tools can be found on our github page: https://github.com/objective-see.
LuLu

In today's connected world, it is rare to find an application or piece of malware that doesn't talk to a remote server. LuLu is the free, open-source, firewall for Macs, that can protect your network connections and detect malicious activity.

Learn more »


Do Not Disturb

Physical access (or "evil maid") attacks are extremely insidious yet highly efficient.
Do Not Disturb detects and alerts you of such attacks!

Learn more »


KnockKnock

"KnockKnock... Who's There?" See what's persistently installed on your Mac. KnockKnock uncovers persistently installed software in order to generically reveal malware.

Learn more »


TaskExplorer

TaskExplorer allows one to visually explore all running tasks (processes). Quickly see a task's signature status, loaded dylibs, open files, network connection, and much more.

Learn more »


ReiKey

Malware and other applications may install persistent keyboard "event taps" to intercept your keystrokes. ReiKey can scan, detect, and monitor for such taps.

Learn more »


Netiquette

Netiquette, a network monitor, allows one to explore all network sockets and connections, either via an interactive UI, or from the commandline.

Learn more »


BlockBlock

BlockBlock provides continual protection by monitoring persistence locations. Any new persistent component will trigger a BlockBlock alert, allowing malicious items be blocked.

Learn more »


RansomWhere?

By continually monitoring the file-system for the creation of encrypted files by suspicious processes, RansomWhere? aims to protect your personal files, generically stopping ransomware in its tracks.

Learn more »


OverSight

Mac malware often spies on users by recording audio and video sessions...sometimes in an undetected manner. OverSight monitors a mac's mic and webcam, alerting the user when the internal mic is activated, or whenever a process accesses the webcam.

Learn more »



KextViewr

KextViewr displays all loaded kexts, along with their signing status, full path, VirusTotal detection ratios, and more.

Learn more »



Dylib Hijack Scanner

Dylib hijack scanner or DHS, will scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.

Learn more »


What's Your Sign

What's Your Sign adds a ^-click menu item to Finder.app. Click it to display the code-signing information about any file.

Learn more »


Commandline Utilities

Various CLI utilities to facilitate system monitoring and malware analysis.

Learn more »