Skip to content

Instantly share code, notes, and snippets.

@applch
Created April 12, 2020 06:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save applch/49e319b22a1ff0aed2409dd59f11c317 to your computer and use it in GitHub Desktop.
Save applch/49e319b22a1ff0aed2409dd59f11c317 to your computer and use it in GitHub Desktop.
XProtect
macOS includes built-in technology for the signature-based detection of malware. Apple monitors for new malware infections and strains, and updates XProtect signatures automatically—independent from system updates—to help defend Mac systems from malware infections. XProtect automatically detects and blocks the installation of known malware.
Malware removal tool
Should malware make its way onto a Mac, macOS also includes technology to remediate infections. In addition to monitoring for malware activity in the ecosystem to be able to revoke Developer IDs (if applicable) and issue XProtect updates, Apple also issues updates to macOS to remove malware from any impacted systems that are configured to receive automatic security updates. Once the malware removal tool receives updated information, malware is removed after the next restart. The malware removal tool doesn’t automatically reboot the Mac.
Automatic security updates
Apple issues the updates for XProtect and the malware removal tool automatically. By default, macOS checks for these updates daily. For more information on automatic security updates, see the Apple Support article “Mac App Store: Automatic security updates” at support.apple.com/HT204536.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment