endpoint-sec 0.6.0

High-level Rust wrappers around the Endpoint Security Framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

# Endpoint Security - Rust bindings

[Endpoint Security][es] (abbreviated ES here) is a framework[^1] provided by Apple for macOS machines for monitoring system events for potentially malicious activity, see the [official documentation][es] for the exact details.

This repository is composed of two Rust crates:

`endpoint-sec-sys` is the raw events translated from C to Rust, with some additional types that have to exist in the crate because of the orphan rules. While you can use the crate directly, no effort have been made to make it easy nor correct.

`endpoint-sec` contains the higher level wrappers. They're much safer and more ergonomic to use but incur a slight overhead cost in certain methods (not all, not even most of them).

[es]: https://developer.apple.com/documentation/endpointsecurity
[^1]: "framework" in the sense of how a client interacts with the runtime and
      how the Apple documentation refers to it, but the headers used on the
      client side and the compiler arguments to link with the stuff in question
      still make it a "library".

## MSRV

The current MSRV is 1.85.0. It can be updated in any minor version, though
we'll try to be conservative with it. Typically, we'll try to keep it at least
10 versions behind the current stable release.

## Contributing

All contributions are welcome, provided they respect the [Rust Code of Conduct](https://www.rust-lang.org/policies/code-of-conduct). Opening an issue to signal a bug is a contribution!

## License

Dual licensed under Apache 2 and MIT, see the `LICENSE-APACHE` and `LICENSE-MIT` files.