THIS IS CURRENTLY BETA SOFTWARE PLEASE FEEL FREE TO TEST THIS SOFTWARE. USAGE IS AT YOUR OWN RISK
Monitor24 collects, filters, deduplicates, stores and uploads selected events from the Apple Endpoint Security Framework.
It can also enforce rules on file access and execution of processes regardless of whether the user has administrator/root access.
There are 2 packages Monitor24 & Monitor24 Controller, the controller is a tool intended to be used for setup/testing only (it's functionality can be disabled via a configuration option)