Skip to content

MacPersistenceChecker v1.3.0

Choose a tag to compare

@Pinperepette Pinperepette released this 17 Dec 08:19
· 16 commits to main since this release

What's New in v1.3.0

Risk Assessment System

  • Automatic security risk scoring (0-100) for every persistence item
  • Detailed risk factor breakdown
  • Items sorted by risk score for quick threat identification
  • Severity levels: Low, Medium, High, Critical

Signed-but-Dangerous Detection

  • Advanced analysis for signed but potentially malicious software
  • Dangerous entitlements detection
  • Apple impersonation detection
  • Hidden locations flagging
  • Developer certificate validation

Timeline & Forensics

  • Complete forensic timeline for each item
  • File creation, modification, and execution timestamps
  • Timestamp anomaly detection (timestomping, file replacement, binary swap)

MITRE ATT&CK Integration

  • Every persistence mechanism mapped to ATT&CK tactics and techniques
  • Direct links to MITRE documentation

Interactive Graph Visualization

  • Full system graph overview
  • Per-item focused radial graphs
  • Color-coded by trust level

Other Improvements

  • Faster, more responsive search
  • Enhanced detail view layout
  • Better UI organization

Requirements: macOS 13.0+

Note: If macOS says the app is damaged, run:
```
xattr -cr /Applications/MacPersistenceChecker.app
```