KnockKnock

Objective-See Foundation · A Mac persistence inspector that lists automatically launched software, shows signing details and optionally checks file hashes with VirusTotal.

CaskSecurity & PrivacyApple silicon · Intel
From homebrew/cask
30-day installs360#301 in App
1-year installs5.6KLast 365 days
Latest version4.1.03 days ago · Oct 7
Download size2.6MBarm64 / x86_64 · zip
Release cadenceEvery 2 weeks1 release in 30 days
  1. 4.1.0

    LatestOct 7 · Wed

    OpenNavo editorialAdded to Homebrew Sep 15 10:36

    Adds root-mode preferences and macOS 27 compatibility, with scan hardening.

    Added
    Adds an always-run-as-root preference using console-user settings.
    Fixed
    Fixes Full Disk Access detection on macOS 27.Corrects launchd enable/disable logic and domain-aware overrides.Preserves scan items if JSON serialization fails.
    Improved
    Isolates plug-in scans and guards malformed or oversized input files.Improves LaunchItems, BTM, dylib, cron and browser-extension enumeration.Stops remaining VirusTotal lookups after the quota is exhausted.
  2. 4.0.3

    PatchDec 18, 2025 · Thu

    OpenNavo editorialAdded to Homebrew Dec 18, 2025 07:07

    Improves background-task enumeration and keeps VirusTotal submissions unchecked.

    Improved
    Improves the user interface and Background Task Management enumeration.
    Changed
    Starts Submit to VirusTotal checkboxes in the unchecked state.
  3. 4.0.2

    PatchDec 17, 2025 · Wed

    OpenNavo editorialAdded to Homebrew Dec 17, 2025 04:23

    Refactors and improves the comparison of saved and current scans.

    Improved
    Refactors and improves Compare Scan(s) logic.

An open-source interface for Homebrew. Installs run through the macOS app or the brew command.

© 2026 OpenNavo