MacPersistenceChecker v1.3.0
What's New in v1.3.0
Risk Assessment System
- Automatic security risk scoring (0-100) for every persistence item
- Detailed risk factor breakdown
- Items sorted by risk score for quick threat identification
- Severity levels: Low, Medium, High, Critical
Signed-but-Dangerous Detection
- Advanced analysis for signed but potentially malicious software
- Dangerous entitlements detection
- Apple impersonation detection
- Hidden locations flagging
- Developer certificate validation
Timeline & Forensics
- Complete forensic timeline for each item
- File creation, modification, and execution timestamps
- Timestamp anomaly detection (timestomping, file replacement, binary swap)
MITRE ATT&CK Integration
- Every persistence mechanism mapped to ATT&CK tactics and techniques
- Direct links to MITRE documentation
Interactive Graph Visualization
- Full system graph overview
- Per-item focused radial graphs
- Color-coded by trust level
Other Improvements
- Faster, more responsive search
- Enhanced detail view layout
- Better UI organization
Requirements: macOS 13.0+
Note: If macOS says the app is damaged, run:
```
xattr -cr /Applications/MacPersistenceChecker.app
```